DAST Security Engineer (f/m/x)

Sii Poland; Katowice; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Great Place to Work

Centre of internal trainings

Profit sharing

Regular integration events and trips

Medical care

Job summary

Sii Poland is seeking an experienced security engineer to design, operate and improve DAST-based security platforms in a global IT environment. You will run web/app/API scans and work with application owners, infrastructure teams and vendors to validate results and ensure secure delivery.

You will also automate scanning workflows, manage access data, and build comprehensive reports while documenting configurations for auditable, portable setups.

Qualifications

• Minimum 5 years in IT security with focus on DAST.
• Hands-on with DAST platforms; Tenable WAS preferred; Invicti/Burp/Qualys welcome.
• Understanding of monolithic, SPA, API and microservices deployments.
• Strong knowledge of SSO, OAuth2 and MFA authentication mechanisms.
• Familiarity with OWASP Top 10 and API Security Top 10.
• Experience with Python, SQL and REST API for data analysis.
• Experience with CMDB and ITSM.
• English B2 proficiency.

Responsibilities

• Configure, run and optimize DAST scans using Tenable WAS or equivalent.
• Analyze architecture and test scope before testing.
• Collaborate with owners, infra teams and vendors on results.
• Manage scan access data per security policies.
• Build reporting layers: coverage, severity findings, SLA.
• Document configuration and operation procedures for auditable scans.

Skills

DAST

Python

SQL

REST API

OAuth2/MFA

AWS

English B2

Tools

Tenable WAS

Invicti

Burp Suite Enterprise

Qualys WAS

GitLab pipelines

Power BI

Job description

We are looking for an experienced engineer to support projects related to infrastructure security and the daily operation of critical security services. As part of a team of experts, you will be responsible for designing, implementing, operating, troubleshooting, automating, and continuously improving security platforms in a global IT environment. You will conduct web application and API scanning across the entire application portfolio, collaborating with infrastructure teams, security teams, application owners, and managed service providers. If you are passionate about IT security and want to make an impact on its development, this offer could be perfect for you.

Your tasks

• Configuring, running, and optimizing DAST scans using Tenable WAS or similar solutions
• Analyzing application architecture, authentication mechanisms, and scan scope before testing
• Collaborating with application owners, infrastructure teams, and vendors on planning and validating scan results
• Managing scan access data according to security principles and organizational policies
• Building and maintaining reporting layers, including coverage, findings by severity, and SLA compliance
• Maintaining documentation of configuration and operational procedures to ensure scan setup is auditable and portable

Requirements

• Minimum 5 years of experience in IT security, with a focus on DAST
• Practical knowledge of DAST platforms, preferably Tenable WAS; experience with Invicti, Burp Suite Enterprise, or Qualys WAS is also welcome
• Good understanding of application development and deployment processes, including monolithic architectures, SPA, API, and microservices
• Excellent knowledge of authentication mechanisms such as SSO, OAuth2, and MFA
• Familiarity with OWASP Top 10 and API Security Top 10
• Ability to work with Python, SQL, and REST API for data analysis and processing
• Experience with CMDB and ITSM
• English language proficiency at a minimum B2 level

Nice to have

• Automation and scripting skills (Python/Bash)
• Experience with GitLab pipelines and AWS services
• Knowledge of BI tools (Power BI or equivalent)

Sii ensures that all hiring decisions are made solely on the basis of qualifications and competence. We are committed to equal and fair treatment of all, regardless of legally protected characteristics. At Sii, we promote a diverse and inclusive work environment, in full compliance with applicable anti-discrimination laws.

Benefits For You

• Great Place to Work
• Solid financial situation
• Contracts with the biggest brands
• Centre of internal trainings
• Many experts you can learn from
• Open and accessible management team
• Profit sharing
• Passion Sponsorship program
• Regular integration events and trips
• Comfortable and well-equipped offices
• MySii app
• Medical care