Junior Application Security Engineer

Nortal; Kraków; On-site; PLN 60,000 - 80,000; Full time

Job summary

Nortal is seeking a Junior Application Security Engineer in Kraków, Poland. You’ll fix security-related issues, retest changes, and help triage new findings using AI assistants.

Ideal candidates have 1–2 years of development experience, know at least one language from Java, C#, TypeScript, Ruby or PHP, and show interest in security. Entry-level certifications or labs are a plus.

Qualifications

• 1–2 years of professional development or graduate/bootcamp record.
• Proficient in Java, C#, TypeScript, Ruby or PHP.
• Some evidence of an interest in security.

Responsibilities

• Fixes well-scoped issues such as security headers, cookie flags, configuration and straightforward dependency upgrades
• Retests fixes and records the evidence
• Helps triage new findings
• Gets to know the estate quickly with AI assistants

Skills

Java

C#

TypeScript

Ruby

PHP

Security interest

Education

Graduate or bootcamp program

Job description

We are looking for a Junior Application Security Engineer.

About Nortal

We’reNortal. We think big and createcutting-edgedigital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwideimpactedby our work, we believewe’vegot the numbers to back up that statement.

Our global teams have played a significant role in many Fortune 500 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.

Responsibilities

• Fixes well-scoped issues such as security headers, cookie flags, configuration and straightforward dependency upgrades
• Retests fixes and records the evidence
• Helps triage new findings
• Gets to know the estate quickly with AI assistants

Qualifications

• 1-2 years of professional development, or a strong graduate or bootcamp record
• Codes in at least one of Java, C#, TypeScript, Ruby or PHP
• Some evidence of an interest in security

Helpful, or can be learned

• CTFs, bug bounty, OWASP Juice Shop, home labs or similar
• Comfortable with AI coding assistants
• Security+, eJPT or a similar entry-level certification
• Open-source contributions