Hybrid AppSec Engineer (Wroclaw: 2 days onsite)

Ework Group; Wrocław; In loco; PLN 120.000 - 210.000; Tempo pieno

Descrizione del lavoro

Ework Group is seeking a mid-level Application Security Engineer to join the AppSec Platform & Security Engineering team in Wroclaw. The role focuses on integrating security into the software development lifecycle, conducting security testing, and guiding development teams to remediate vulnerabilities.

Requirements include 4–5 years in application security, solid scripting in Python/Java/.NET, and hands-on experience with security tools. On-site presence in Wrocław is required.

Competenze

• Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity or a related field, or equivalent practical experience.
• 4-5 years of relevant experience in application security, software security, secure software development or a closely related technical field.
• Hands-on experience with application security assessments, vulnerability analysis or security testing.
• Experience working with software development teams to identify and address security issues.
• Experience writing code and developing digital products; intermediate programming or scripting skills in Python, Java or .NET.
• Experience with AppSec tools such as Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck or Sonatype Lifecycle (or comparable).
• Familiarity with OWASP Top 10, OWASP ASVS and other relevant OWASP standards.
• Familiarity with SAST, DAST and SCA and their integration into CI/CD pipelines.
• Experience with cloud-native application security, containers or Kubernetes.
• Familiarity with DevSecOps practices, version control and CI/CD pipelines, preferably Jenkins, Git, Docker or Kubernetes.
• Understanding of vulnerability management, risk assessment and remediation processes.
• Soft skills: strong analytical and problem-solving skills, attention to detail, clear written and verbal communication, collaborative approach, proactive mindset and ownership.

Mansioni

• Support development teams in integrating security into the software development lifecycle and applying secure coding practices.
• Perform and support security assessments using application security tools, analyze findings, prioritize risks and guide teams in remediating vulnerabilities.
• Work with SAST, DAST and SCA tools and other security testing technologies to identify potential risks in applications.
• Contribute to threat modelling, security design reviews and the application of established security patterns.
• Support the integration and improvement of AppSec tools and processes within CI/CD pipelines and development workflows.
• Contribute to security awareness activities, training materials and guidance for development teams.
• Help teams implement relevant security requirements, standards and internal policies.
• Identify opportunities to improve AppSec processes, tooling and ways of working.
• Communicate security findings, explain risks and support practical remediation together with developers, architects and security colleagues.

Conoscenze

Application security

Secure SDLC

Python/Java/.NET

CI/CD pipelines

Threat modelling

Security testing

Vulnerability analysis

Analytical thinking

Communication

Collaboration

Formazione

Bachelor’s or Master’s degree in CS/InfoSec

Equivalent practical experience

Strumenti

Semgrep

SonarQube

HCL AppScan

ZAP

Black Duck

Sonatype Lifecycle

Jenkins

Git

Docker

Kubernetes

Descrizione del lavoro

Ework Group is seeking a mid-level Application Security Engineer to join the AppSec Platform & Security Engineering team in Wroclaw. The role focuses on integrating security into the software development lifecycle, conducting security testing, and guiding development teams to remediate vulnerabilities.

Requirements include 4–5 years in application security, solid scripting in Python/Java/.NET, and hands-on experience with security tools. On-site presence in Wrocław is required.