Secrets & Credential Security Analyst - B2B Contract

Capco; Poland; On-site; PLN 140,000 - 210,000; Full time

Job summary

Capco Poland is seeking an IT Security Analyst to support a large-scale Secrets & Credential Management initiative. You will analyze current-state environments, identify control gaps, and define robust security requirements across technical and business teams.

This role focuses on governing sensitive credentials, aligning with regulatory expectations, and delivering scalable secure access solutions through collaboration with IAM professionals.

Qualifications

• At least 5 years of experience in a similar role.
• At least 2 years of experience with IAM projects.
• Experience in IT security analysis, security requirements engineering, or security governance.
• Strong understanding of IAM, PAM, least privilege, and secure access governance.
• Knowledge of credential types (passwords, SSH keys, API keys, tokens, certificates, service accounts).
• Ability to translate security risks and control gaps into actionable requirements.
• Strong communication and documentation skills, with the ability to collaborate across technical and non-technical teams.

Responsibilities

• Conduct end-to-end analysis of secrets and credential management practices across applications, infrastructure, and platforms
• Identify, classify, and document secrets, including ownership, usage, storage, lifecycle stage, and associated risks
• Assess control gaps (e.g., unmanaged credentials, hardcoded secrets, weak auditability) and define remediation approaches
• Define functional and non-functional requirements for centralized secrets management solutions
• Facilitate workshops with stakeholders to gather requirements, validate findings, and support governance activities

Skills

IAM

Security governance

Security analysis

Documentation

Stakeholder collaboration

Credentials

Regulatory awareness

Job description

Capco Poland is seeking an IT Security Analyst to support a large-scale Secrets & Credential Management initiative. You will analyze current-state environments, identify control gaps, and define robust security requirements across technical and business teams.

This role focuses on governing sensitive credentials, aligning with regulatory expectations, and delivering scalable secure access solutions through collaboration with IAM professionals.