DAST Security Engineer (f/m/x)

Sii Poland

Piła

On-site

PLN 180,000 - 240,000

Full time

9 hours ago

Be an early applicant

Get more replies from employers

Send a job-specific resume in minutes.

Benefits offered by this job

Great Place to Work

Solid financial situation

Contracts with the biggest brands

Centre of internal trainings

Many experts you can learn from

Open and accessible management team

Profit sharing

Passion Sponsorship program

Regular integration events and trips

Comfortable and well-equipped offices

MySii app

Medical care

Job summary

Sii Poland is seeking an experienced IT security engineer to support infrastructure security and operate critical security services. You will design, implement, and optimize security platforms in a global IT environment, conducting web app and API scanning across the portfolio.

You will configure and run DAST scans (Tenable WAS preferred), analyze architecture, collaborate with owners and vendors, and maintain documentation. English proficiency at B2 level is required.

Qualifications

Minimum 5 years of IT security experience with a focus on DAST.
Experience with DAST platforms (prefer Tenable WAS; Invicti, Burp Suite Enterprise, or Qualys WAS also welcome).
Good understanding of application development and deployment: monolithic architectures, SPA, API, microservices.
Excellent knowledge of authentication mechanisms: SSO, OAuth2, MFA.
Familiarity with OWASP Top 10 and API Security Top 10.
Ability to work with Python, SQL, and REST API for data analysis.
Experience with CMDB and ITSM.
English language proficiency at a minimum B2 level.

Responsibilities

Configure, run, and optimize DAST scans.
Analyze architecture, authentication, and scan scope before testing.
Collaborate with owners, infrastructure teams, and vendors on plan and validate results.
Manage scan access data per security principles and policies.
Build and maintain reporting layers: coverage, severity findings, SLA.
Document configuration and procedures to keep scan setup auditable and portable.

Skills

DAST platforms

Python

SQL

REST API

OAuth2

MFA

SSO

Web security

APIs/Microservices

English (B2)

Tools

Tenable WAS

Invicti

Burp Suite Enterprise

Qualys WAS

GitLab pipelines

AWS

Power BI

Job description

We are looking for an experienced engineer to support projects related to infrastructure security and the daily operation of critical security services. As part of a team of experts, you will be responsible for designing, implementing, operating, troubleshooting, automating, and continuously improving security platforms in a global IT environment. You will conduct web application and API scanning across the entire application portfolio, collaborating with infrastructure teams, security teams, application owners, and managed service providers. If you are passionate about IT security and want to make an impact on its development, this offer could be perfect for you.

Your tasks

Configuring, running, and optimizing DAST scans using Tenable WAS or similar solutions
Analyzing application architecture, authentication mechanisms, and scan scope before testing
Collaborating with application owners, infrastructure teams, and vendors on planning and validating scan results
Managing scan access data according to security principles and organizational policies
Building and maintaining reporting layers, including coverage, findings by severity, and SLA compliance
Maintaining documentation of configuration and operational procedures to ensure scan setup is auditable and portable

Requirements

Minimum 5 years of experience in IT security, with a focus on DAST
Practical knowledge of DAST platforms, preferably Tenable WAS; experience with Invicti, Burp Suite Enterprise, or Qualys WAS is also welcome
Good understanding of application development and deployment processes, including monolithic architectures, SPA, API, and microservices
Excellent knowledge of authentication mechanisms such as SSO, OAuth2, and MFA
Familiarity with OWASP Top 10 and API Security Top 10
Ability to work with Python, SQL, and REST API for data analysis and processing
Experience with CMDB and ITSM
English language proficiency at a minimum B2 level

Nice to have

Automation and scripting skills (Python/Bash)
Experience with GitLab pipelines and AWS services
Knowledge of BI tools (Power BI or equivalent)

Job no. JOB-Z6JKT

Sii ensures that all hiring decisions are made solely on the basis of qualifications and competence. We are committed to equal and fair treatment of all, regardless of legally protected characteristics. At Sii, we promote a diverse and inclusive work environment, in full compliance with applicable anti-discrimination laws.

Benefits For You