Cybersecurity Specialist

DCG; Warszawa; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Private medical care

Co-financing for the sports card

Constant consultant support

Job summary

DCG is seeking a Cybersecurity Specialist to join our growing team in Warszawa. You will support threat modelling workshops, identify assets and threat surfaces, and update threat models using approved methodologies. You will collaborate with development and security teams to map threats to controls and document remediation actions.

Fluency in English is required, and a good understanding of STRIDE and IT security architecture will help you succeed in this role at DCG.

Qualifications

• Minimum 3 years of professional cybersecurity experience.
• Knowledge of IT Security Architecture principles.
• Familiarity with threat modelling methodologies, particularly STRIDE.
• Understanding AI, ML, and LLM security threats.
• Ability to map threats to security controls and remediation actions.
• Fluency in English (written and spoken).

Responsibilities

• Support threat modelling workshops with application and platform teams.
• Assist in identifying assets, trust boundaries, attack surfaces, threat actors, abuse cases, and security risks.
• Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries.
• Review solution designs, architecture documentation, and application data flows in cooperation with senior security specialists.
• Map relevant threat scenarios to application components, data flows, and predefined security controls.
• Document identified threats, risks, assumptions, mitigation actions, and remediation requirements.
• Cooperate with development and security teams to gather required information and support remediation activities.
• Track identified threats, mitigation actions, and remediation progress.

Skills

Threat modelling

IT security

Security architecture

STRIDE

AI/LLM security

English fluency

Job description

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:

Cybersecurity Specialist

Responsibilities:

• Support threat modelling workshops with application and platform teams
• Assist in identifying critical assets, trust boundaries, attack surfaces, threat actors, abuse cases, and security risks
• Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries
• Review solution designs, architecture documentation, and application data flows in cooperation with senior security specialists
• Map relevant threat scenarios to application components, data flows, and predefined security controls
• Document identified threats, risks, assumptions, mitigation actions, and remediation requirements
• Cooperate with development and security teams to gather required information and support remediation activities
• Track identified threats, mitigation actions, and remediation progress

Requirements:

• Minimum 3 years of professional experience in cybersecurity, IT security, application security, or a related area
• Knowledge of IT Security Architecture principles
• Basic practical knowledge of threat modelling methodologies, particularly STRIDE
• Understanding of cybersecurity threats related to AI agents, machine learning systems, and Large Language Models (LLMs)
• Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse scenarios
• Experience working with or maintaining existing threat models and threat libraries
• Ability to map identified threats to relevant security controls and remediation actions
• Fluency in English (both written and spoken)

Nice to have:

• Ability to translate technical security threats into understandable business risks
• Basic knowledge of the OWASP Top 10 for LLM Applications
• Familiarity with MITRE ATLAS and its use as a reference framework for AI-related threat assessments

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant