Information Security Engineer – DevSecOps/AppSec

PMSolutions; Wrocław; On-site; PLN 27,000 - 33,000; Full time

Job summary

Wiodąca firma zajmująca się bezpieczeństwem informacji poszukuje Inżyniera Bezpieczeństwa Informacji. Idealny kandydat powinien mieć doświadczenie w testach bezpieczeństwa aplikacji i wdrażaniu strategii bezpieczeństwa w cyklach życia rozwoju. Praca hybrydowa oferująca atrakcyjne wynagrodzenie w dynamicznym środowisku.

Qualifications

• Doświadczenie w pracy z chmurą, zwłaszcza AWS.
• Umiejętność pracy niezależnej i w zespole globalnym.
• Doświadczenie w testach web applications i przeglądach kodu.

Responsibilities

• Rozwój narzędzi cybersecurity i integracja z pipeline DevOps.
• Nadzór nad cyklami życia programowania i analiza informacji o bezpieczeństwie.
• Prowadzenie badań w zakresie bezpieczeństwa dla potrzeb biznesowych.

Skills

Testowanie bezpieczeństwa aplikacji

Zarządzanie ryzykiem

Oceny podatności

Penetracyjne testowanie

Praca w chmurze

Job description

Information Security Engineer – DevSecOps/AppSec

Wrocław
Hybrid work – 2 days in office in Wrocław, 3 days remote
Contract of Employment – full-time job
Salary: 30,000 PLN gross

We are looking for an Information Security Engineer for our client, one of the biggest airlines.

The Role

We seek a security professional comfortable working with minimal supervision. Your responsibilities will include performing security architecture reviews of platforms, collaborating with business units to ensure security standards are met throughout project lifecycles, and contributing to the security program via reviews and audits. You will also help integrate cybersecurity needs with business objectives.

The SecDevOps Engineer provides operational and security expertise to implement secure software development measures into CI/CD pipelines, working closely with development teams to incorporate shift-left security strategies.

Responsibilities

1. Contribute to the development of cybersecurity tools and integrate them into DevOps pipelines.
2. Oversee development lifecycles and analyze security information.
3. Drive continuous improvement of DevOps pipelines, cybersecurity tools, and processes.
4. Conduct security research to support strategic, tactical, and operational business needs.
5. Research and evaluate security testing tools.
6. Perform white-box code reviews of products, applications, and integrations where appropriate.

Requirements

1. Experience working with cloud environments in a security-enabled context, especially with AWS.
2. Proven ability to work independently and collaboratively within a global team, meeting multiple deployment schedules.
3. Experience with web application security testing, code reviews, vulnerability assessments, penetration testing, and reporting.
4. Knowledge of security controls and protocols such as NIST and PCI, including governance and risk management.
5. Relevant experience in application security, secure software development, and integrating security into development workflows.

Please send your CV to: [e-mail]