Junior Security Engineer

Nortal; Kraków; On-site; PLN 180,000 - 280,000; Full time

Job summary

Nortal is seeking a Security Engineer to embed security practices into the software delivery lifecycle, helping teams build and release secure products with minimal friction. You’ll work with engineering, product, platform and security teams to integrate controls, vulnerability management and secure engineering practices into day-to-day delivery.

As a hands-on contributor, you’ll perform threat modelling, security reviews and participate in incident response while building reusable

Qualifications

• Hands-on security professional with experience integrating security into software delivery lifecycle.
• Familiar with threat modeling, secure reviews, and incident response practices.

Responsibilities

• Conduct threat modelling, secure code reviews, and architecture reviews using established security standards and guidance.
• Identify attack vectors, data flow weaknesses, and authentication and authorisation gaps, and provide actionable remediation guidance.
• Perform vulnerability discovery, security testing, remediation planning, validation, and prioritisation of findings using established risk frameworks.
• Configure and maintain security scanning, pipeline gates, secret detection, Infrastructure-as-Code security scanning, and

Job description

We are looking for a Security Engineer to help embed security practices into the software delivery lifecycle and enable teams to build and release secure products without unnecessary friction. In this role, you will work closely with engineering, product, platform, and security teams to integrate security controls, vulnerability management, and secure engineering practices into day-to-day delivery activities.

As a hands-on technical contributor, you will participate in team ceremonies, conduct security reviews, support incident response activities, and build reusable secure-by-default solutions. You will collaborate with Security Architects and other security specialists to address complex security challenges while helping teams adopt secure development practices and improve overall security maturity.

About Nortal

We’reNortal. We think big and createcutting-edgedigital solutions with a global reach. And with 25 years of experience, 2,700+ professional experts, and half a billion people worldwideimpactedby our work, we believewe’vegot the numbers to back up that statement.

Our global teams have played a significant role in many Fortune500 companies’ projects and systems and have been the driving force of digital transformation for governments, healthcare institutions, and leading enterprises worldwide. We combine best-in-class strategic consulting with software engineering, data, and design practices to bring our visions to life.

About TUI

TUIis aglobal business with over 70,000 people onboard, agreat history and challenging plans for building adigital future. TUIis the largest leisure, travel and tourism company globally, and itowns travel agencies, hotels, airlines, cruise ships and retail shops.

Responsibilities

• Conduct threat modelling, secure code reviews, and architecture reviews using established security standards and guidance.
• Identify attack vectors, data flow weaknesses, and authentication and authorisation gaps, and provide actionable remediation guidance.
• Perform vulnerability discovery, security testing, remediation planning, validation, and prioritisation of findings using established risk frameworks.
• Configure and maintain security scanning, pipeline gates, secret detection, Infrastructure-as-Code security scanning, and