Cybersecurity Specialist

DCG Poland; Warszawa; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Private medical care

Sports card co-financing

Dedicated consultant support

Job summary

DCG Poland is actively seeking a Cybersecurity Specialist to support threat modelling workshops and identify critical assets, trust boundaries, and risks. You will create and maintain threat models, review designs, and map threats to controls in collaboration with developers and security teams.

Fluency in English is required. Enjoy a role that emphasizes practical risk analysis, incident prevention, and close cooperation with cross-functional teams within a dynamic recruitment-focused

Qualifications

• Minimum 3 years of professional experience in cybersecurity or related area.
• Knowledge of IT Security Architecture principles.
• Understanding of threats related to AI, ML, and LLMs.
• Fluency in English (written and spoken).

Responsibilities

• Support threat modelling workshops with application and platform teams.
• Identify assets, trust boundaries, attack surfaces, threat actors, abuse cases, and risks.
• Create and maintain threat models using approved methodologies and tools.
• Review designs and data flows with senior security specialists.
• Map threats to components, data flows, and security controls.
• Document threats, risks, mitigations, and remediation needs.
• Collaborate with development and security teams to gather info and support remediation.
• Track threats, mitigations, and remediation progress.

Skills

Cybersecurity

Threat modelling (STRIDE)

IT security architecture

English language

Job description

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:

Cybersecurity Specialist

Responsibilities:

• Support threat modelling workshops with application and platform teams
• Assist in identifying critical assets, trust boundaries, attack surfaces, threat actors, abuse cases, and security risks
• Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries
• Review solution designs, architecture documentation, and application data flows in cooperation with senior security specialists
• Map relevant threat scenarios to application components, data flows, and predefined security controls
• Document identified threats, risks, assumptions, mitigation actions, and remediation requirements
• Cooperate with development and security teams to gather required information and support remediation activities
• Track identified threats, mitigation actions, and remediation progress

Requirements:

• Minimum 3 years of professional experience in cybersecurity, IT security, application security, or a related area
• Knowledge of IT Security Architecture principles
• Basic practical knowledge of threat modelling methodologies, particularly STRIDE
• Understanding of cybersecurity threats related to AI agents, machine learning systems, and Large Language Models (LLMs)
• Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse scenarios
• Experience working with or maintaining existing threat models and threat libraries
• Ability to map identified threats to relevant security controls and remediation actions
• Fluency in English (both written and spoken)

Nice to have:

• Ability to translate technical security threats into understandable business risks
• Basic knowledge of the OWASP Top 10 for LLM Applications
• Familiarity with MITRE ATLAS and its use as a reference framework for AI-related threat assessments

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant