IT Security Consultant

emagine; Województwo mazowieckie; Hybride; PLN 153 000 - 219 000; Plein temps

Résumé du poste

emagine is seeking an IT Security Consultant to support application-level assessments and threat mapping within the banking sector. The role is hybrid across Gdańsk, Gdynia, and Warsaw, with 3 days in the office per week. The contract is 12 months plus extensions, starting ASAP, and operates on a B2B basis.

English/Polish project language and AI-related security focus are key elements. Responsibilities include threat modelling, asset and risk mapping, and collaboration with development and

Qualifications

• Knowledge of IT Security Architecture principles.
• Understanding AI agents and ML security threats.
• Familiarity with STRIDE threat modelling.
• Ability to map threats to predefined security controls and remediation actions.

Responsabilités

• Support threat modelling workshops with application and platform teams.
• Assist in identifying assets, trust boundaries, attack surfaces, threats, and security risks.
• Create and update threat models using approved tools, methodologies, and templates.
• Review solution designs and architecture documentation with guidance from senior team members.
• Assist in mapping relevant threat scenarios to application components and data flows.
• Document identified threats, risks, assumptions, and proposed mitigation actions.
• Collaborate with development and security teams to collect information and follow up on remediation activities.
• Track identified threats, mitigation actions, and remediation status.

Connaissances

IT Security Architecture

Threat modelling

STRIDE methodology

AI/ML security awareness

Security controls mapping

Description du poste

Industry: banking

Work model: hybrid in Gdańsk/Gdynia/Warsaw (3 days x week from the office)

Project length: 12 months + possible extensions

Project language: English / Polish

Assignment type: B2B

Rate: up to 135 PLN/h + VAT

Start: ASAP

Summary

The role of IT Security Consultant focuses on supporting application-level assessments and threat mapping activities, ensuring robust cybersecurity measures are in place against emerging threats, particularly in the realms of AI-related risks.

Main Responsibilities

• Support threat modelling workshops with application and platform teams.
• Assist in identifying assets, trust boundaries, attack surfaces, threats, and security risks.
• Create and update threat models using approved tools, methodologies, and templates.
• Review solution designs and architecture documentation with guidance from senior team members.
• Assist in mapping relevant threat scenarios to application components and data flows.
• Document identified threats, risks, assumptions, and proposed mitigation actions.
• Collaborate with development and security teams to collect information and follow up on remediation activities.
• Track identified threats, mitigation actions, and remediation status.

Key Requirements

• Knowledge of IT Security Architecture principles.
• General understanding of security threats related to AI agents, machine learning systems, and large language models.
• Basic knowledge of threat modelling methodologies, particularly STRIDE.
• Ability to identify assets, trust boundaries, attack surfaces, threat actors, and abuse cases with guidance.
• Ability to use and update existing threat models and threat libraries.
• Ability to support mapping threats to predefined security controls and remediation actions.

Nice to Have

• Ability to translate technical threats into understandable business risks with guidance.
• Basic knowledge of the OWASP Top 10 for LLM Applications and MITRE ATLAS.