DAST Security Engineer (f/m/x)

Sii Poland; Kraków; On-site; PLN 120,000 - 190,000; Full time

Benefits offered by this job

Great Place to Work

Contracts with the biggest brands

Centre of internal trainings

Regular integration events and trips

Medical care

Job summary

Sii Poland is seeking an experienced IT security engineer to support infrastructure security projects and the daily operation of critical security services in a global IT environment.

You will design, implement, operate, troubleshoot, automate, and continuously improve security platforms while collaborating with cross-functional teams. 1

Qualifications

• Minimum 5 years of experience in IT security, with a focus on DAST.
• Practical knowledge of DAST platforms, preferably Tenable WAS; experience with Invicti, Burp Suite Enterprise, or Qualys WAS is also welcome.
• Good understanding of application development and deployment processes, including monolithic architectures, SPA, API, and microservices.
• Excellent knowledge of authentication mechanisms such as SSO, OAuth2, and MFA.
• Familiarity with OWASP Top 10 and API Security Top 10.
• Ability to work with Python, SQL, and REST API for data analysis and processing.
• Experience with CMDB and ITSM.
• English language proficiency at a minimum B2 level.

Responsibilities

• Configuring, running, and optimizing DAST scans using Tenable WAS or similar solutions.
• Analyzing application architecture, authentication mechanisms, and scan scope before testing.
• Collaborating with application owners, infrastructure teams, and vendors on planning and validating scan results.
• Managing scan access data according to security principles and organizational policies.
• Building and maintaining reporting layers, including coverage, findings by severity, and SLA compliance.
• Maintaining documentation of configuration and operational procedures to ensure scan setup is auditable and portable.

Skills

IT security

DAST

Python

SQL

REST API

OAuth2

MFA

OWASP Top 10

English B2

Monolithic/SOA/Microservices

Tools

Tenable WAS

Invicti

Burp Suite Enterprise

Qualys WAS

Job description

We are looking for an experienced engineer to support projects related to infrastructure security and the daily operation of critical security services. As part of a team of experts, you will be responsible for designing, implementing, operating, troubleshooting, automating, and continuously improving security platforms in a global IT environment. You will conduct web application and API scanning across the entire application portfolio, collaborating with infrastructure teams, security teams, application owners, and managed service providers. If you are passionate about IT security and want to make an impact on its development, this offer could be perfect for you.

Your tasks

• Configuring, running, and optimizing DAST scans using Tenable WAS or similar solutions
• Analyzing application architecture, authentication mechanisms, and scan scope before testing
• Collaborating with application owners, infrastructure teams, and vendors on planning and validating scan results
• Managing scan access data according to security principles and organizational policies
• Building and maintaining reporting layers, including coverage, findings by severity, and SLA compliance
• Maintaining documentation of configuration and operational procedures to ensure scan setup is auditable and portable

Requirements

• Minimum 5 years of experience in IT security, with a focus on DAST
• Practical knowledge of DAST platforms, preferably Tenable WAS; experience with Invicti, Burp Suite Enterprise, or Qualys WAS is also welcome
• Good understanding of application development and deployment processes, including monolithic architectures, SPA, API, and microservices
• Excellent knowledge of authentication mechanisms such as SSO, OAuth2, and MFA
• Familiarity with OWASP Top 10 and API Security Top 10
• Ability to work with Python, SQL, and REST API for data analysis and processing
• Experience with CMDB and ITSM
• English language proficiency at a minimum B2 level

Nice to have

• Automation and scripting skills (Python/Bash)
• Experience with GitLab pipelines and AWS services
• Knowledge of BI tools (Power BI or equivalent)

Job no. JOB-Z6JKT

Sii ensures that all hiring decisions are made solely on the basis of qualifications and competence. We are committed to equal and fair treatment of all, regardless of legally protected characteristics. At Sii, we promote a diverse and inclusive work environment, in full compliance with applicable anti-discrimination laws.

Benefits For You

• Great Place to Work
• Solid financial situation
• Contracts with the biggest brands
• Centre of internal trainings
• Many experts you can learn from
• Open and accessible management team
• Profit sharing
• Passion Sponsorship program
• Regular integration events and trips
• Comfortable and well-equipped offices
• MySii app
• Medical care