Cybersecurity Specialist

Solid Company; Polska; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Private medical care

Co-financing for sports card

Dedicated consultant support

Employee referral program

Job summary

Solid is seeking a Cybersecurity Specialist to support threat modelling, asset identification, and risk assessment across applications and platforms. You will collaborate with security and development teams to map threats to controls and remediation actions, documenting risks and tracking progress.

The role requires 3+ years in cybersecurity, knowledge of IT Security Architecture, STRIDE, and English fluency. Knowledge of AI/ML threat contexts is a plus.

Qualifications

• Minimum 3 years of professional experience in cybersecurity, IT security, application security, or related area.
• Knowledge of IT Security Architecture principles.
• Basic practical knowledge of threat modelling methodologies, particularly STRIDE.
• Understanding of cybersecurity threats related to AI agents, machine learning systems, and LLMs.
• Ability to support identification of assets, trust boundaries, attack surfaces, threat actors, and abuse scenarios.
• Experience maintaining threat models and threat libraries.
• Ability to map threats to security controls and remediation actions.
• Fluency in English (written and spoken).

Responsibilities

• Support threat modelling workshops with application and platform teams.
• Assist in identifying critical assets, trust boundaries, attack surfaces, threat actors, abuse cases, and security risks.
• Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries.
• Review solution designs, architecture documentation, and application data flows with senior security specialists.
• Map threat scenarios to components, data flows, and predefined security controls.
• Document identified threats, risks, assumptions, mitigation actions, and remediation requirements.
• Cooperate with development and security teams to gather information and support remediation activities.
• Track identified threats, mitigation actions, and remediation progress.

Skills

Threat modelling

IT security

Security architecture

STRIDE methodology

AI/ML threat understanding

Remediation tracking

English communication

Tools

Threat modelling tools

Security review tooling

Job description

Cybersecurity Specialist

Responsibilities:

• Support threat modelling workshops with application and platform teams
• Assist in identifying critical assets, trust boundaries, attack surfaces, threat actors, abuse cases, and security risks
• Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries
• Review solution designs, architecture documentation, and application data flows in cooperation with senior security specialists
• Map relevant threat scenarios to application components, data flows, and predefined security controls
• Document identified threats, risks, assumptions, mitigation actions, and remediation requirements
• Cooperate with development and security teams to gather required information and support remediation activities
• Track identified threats, mitigation actions, and remediation progress

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant
• Employee referral program

Kogo poszukujemy?

Requirements:

• Minimum 3 years of professional experience in cybersecurity, IT security, application security, or a related area
• Knowledge of IT Security Architecture principles
• Basic practical knowledge of threat modelling methodologies, particularly STRIDE
• Understanding of cybersecurity threats related to AI agents, machine learning systems, and Large Language Models (LLMs)
• Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse scenarios
• Experience working with or maintaining existing threat models and threat libraries
• Ability to map identified threats to relevant security controls and remediation actions
• Fluency in English (both written and spoken)

Nice to have:

• Ability to translate technical security threats into understandable business risks
• Basic knowledge of the OWASP Top 10 for LLM Applications
• Familiarity with MITRE ATLAS and its use as a reference framework for AI-related threat assessments