Cybersecurity Specialist - Warszawa, Gdańsk, Gdynia

Diverse CG Sp. z o.o. Sp.k.; Poland; Presencial; PLN 150.000 - 200.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Private medical care

Co-financing for sports card

Dedicated consultant support

Descripción de la vacante

Diverse CG Sp. z o.o. Sp.k. in Poland is seeking a Cybersecurity Specialist to help design and maintain threat models and support security initiatives across applications.

The role collaborates with development and security teams to map threats to controls, review architectures, and ensure risk-based remediation. Fluent English is required, and knowledge of STRIDE and AI/LLM security is valuable.

Formación

• 3+ years of experience in cybersecurity or IT security.
• Knowledge of IT Security Architecture principles.
• Basic practical knowledge of threat modelling methodologies, particularly STRIDE.
• Understanding of cybersecurity threats related to AI agents, machine learning systems, and Large Language Models (LLMs).
• Ability to identify assets, trust boundaries, attack surfaces, threat actors, and abuse scenarios.
• Experience with threat models and threat libraries.
• Ability to map threats to security controls and remediation actions.
• Fluency in English (written and spoken).
• Nice to have: translate threats into business risks.
• Nice to have: OWASP Top 10 for LLM Applications.
• Nice to have: MITRE ATLAS familiarity.

Responsabilidades

• Support threat modelling workshops with application and platform teams
• Assist in identifying critical assets, trust boundaries, attack surfaces, threat actors, abuse cases, and security risks
• Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries
• Review solution designs, architecture documentation, and data flows with senior security specialists
• Map threat scenarios to application components, data flows, and predefined security controls
• Document identified threats, risks, assumptions, mitigation actions, and remediation requirements
• Cooperate with development and security teams to gather required information and support remediation; track threats, mitigation actions, and remediation progress

Conocimientos

Threat modelling

IT Security Architecture

STRIDE

AI/LLM security

Assets & risk mapping

Security controls mapping

English proficiency

Descripción del empleo

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:

Cybersecurity Specialist

Responsibilities:

• Support threat modelling workshops with application and platform teams
• Assist in identifying critical assets, trust boundaries, attack surfaces, threat actors, abuse cases, and security risks
• Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries
• Review solution designs, architecture documentation, and application data flows in cooperation with senior security specialists
• Map relevant threat scenarios to application components, data flows, and predefined security controls
• Document identified threats, risks, assumptions, mitigation actions, and remediation requirements
• Cooperate with development and security teams to gather required information and support remediation activitiesTrack identified threats, mitigation actions, and remediation progress

Requirements:

• Minimum 3 years of professional experience in cybersecurity, IT security, application security, or a related area
• Knowledge of IT Security Architecture principles
• Basic practical knowledge of threat modelling methodologies, particularly STRIDE
• Understanding of cybersecurity threats related to AI agents, machine learning systems, and Large Language Models (LLMs)
• Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse scenarios
• Experience working with or maintaining existing threat models and threat libraries
• Ability to map identified threats to relevant security controls and remediation actions
• Fluency in English (both written and spoken)

Nice to have:

• Ability to translate technical security threats into understandable business risks
• Basic knowledge of the OWASP Top 10 for LLM Applications
• Familiarity with MITRE ATLAS and its use as a reference framework for AI-related threat assessments

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant

Personal Consulting Agency (License No. 4642)