DAST Security Engineer: Web/API Security & Automation Lead

Sii Poland; Katowice; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Great Place to Work

Centre of internal trainings

Profit sharing

Regular integration events and trips

Medical care

Job summary

Sii Poland is seeking an experienced security engineer to design, operate and improve DAST-based security platforms in a global IT environment. You will run web/app/API scans and work with application owners, infrastructure teams and vendors to validate results and ensure secure delivery.

You will also automate scanning workflows, manage access data, and build comprehensive reports while documenting configurations for auditable, portable setups.

Qualifications

• Minimum 5 years in IT security with focus on DAST.
• Hands-on with DAST platforms; Tenable WAS preferred; Invicti/Burp/Qualys welcome.
• Understanding of monolithic, SPA, API and microservices deployments.
• Strong knowledge of SSO, OAuth2 and MFA authentication mechanisms.
• Familiarity with OWASP Top 10 and API Security Top 10.
• Experience with Python, SQL and REST API for data analysis.
• Experience with CMDB and ITSM.
• English B2 proficiency.

Responsibilities

• Configure, run and optimize DAST scans using Tenable WAS or equivalent.
• Analyze architecture and test scope before testing.
• Collaborate with owners, infra teams and vendors on results.
• Manage scan access data per security policies.
• Build reporting layers: coverage, severity findings, SLA.
• Document configuration and operation procedures for auditable scans.

Skills

DAST

Python

SQL

REST API

OAuth2/MFA

AWS

English B2

Tools

Tenable WAS

Invicti

Burp Suite Enterprise

Qualys WAS

GitLab pipelines

Power BI

Job description

Sii Poland is seeking an experienced security engineer to design, operate and improve DAST-based security platforms in a global IT environment. You will run web/app/API scans and work with application owners, infrastructure teams and vendors to validate results and ensure secure delivery.

You will also automate scanning workflows, manage access data, and build comprehensive reports while documenting configurations for auditable, portable setups.