Information Security Analyst – Associate (Remote 3x/wk)

EY; Wrocław; Hybrid; PLN 120,000 - 180,000; Full time

Job summary

EY GDS Poland is seeking an Information Security Analyst – Associate/Senior Associate in Wrocław. You will join a global team protecting EY and client information assets, performing security reviews, risk assessment, and audits across multiple platforms.

The role involves mentoring teammates and driving improvements in security testing practices. The position offers a hybrid work model with 2 days in office (Wrocław/Katowice) and 3 days remote, engaging with regulatory frameworks, ISO standards,

Qualifications

• 1–6 years of application security assessment experience.
• Experience with web, thick client, and mobile security reviews.
• Familiarity with manual testing methodologies.
• Understanding of how vulnerabilities affect incidents and detection.
• Knowledge of how apps, networks, and systems are secured.
• Strong multitasking and prioritization abilities.

Responsibilities

• Prepare detailed security review reports and remediation guidance.
• Research new application security vulnerabilities and attack vectors.
• Support the team in updating skills and knowledge.
• Lead strategic initiatives and mentor new team members.
• Continuously improve service quality.
• Configure and update vulnerability assessment tools for accuracy.

Skills

Web/mobile security testing

Burp Suite

Nessus

Nmap

Security testing methods

Mentoring

Education

Bachelor’s or higher in IT/Cyber Security

Tools

Wireshark

Checkmarx

WebInspect

Qualys WAS

Job description

EY GDS Poland is seeking an Information Security Analyst – Associate/Senior Associate in Wrocław. You will join a global team protecting EY and client information assets, performing security reviews, risk assessment, and audits across multiple platforms.

The role involves mentoring teammates and driving improvements in security testing practices. The position offers a hybrid work model with 2 days in office (Wrocław/Katowice) and 3 days remote, engaging with regulatory frameworks, ISO standards,