Secure Software Engineer — Threat Modeling & DevSecOps

1027 Amadeus Polska Sp. z.o.o.; Warszawa; Presencial; PLN 180.000 - 240.000; Jornada completa

Descripción de la vacante

Amadeus Polska Sp. z.o.o. is seeking an Application Security Engineer focused on development to identify and reduce risk across applications and support secure development of customer projects.

You will embed security into the full software lifecycle, covering threat modelling, secure coding, vulnerability management and PCI compliance. Collaborating with development and QA teams, you will ensure security is built in from the start rather than added later, and will work across architecture, dev

Formación

• Relevant experience in software development (.NET), application security, or infrastructure security (AWS/Azure).
• Strong knowledge of secure development practices, threat modeling, and vulnerability management.
• Excellent communication, collaboration, and problem-solving skills.
• Experience with Amadeus LSS and Amadeus Robotics is a plus.

Responsabilidades

• Review new application designs with architecture and development teams to identify security risks early and flag potential blockers before implementation begins.
• Lead threat modelling sessions with dev, QA and business teams to identify risks early in solution design.
• Review code and binary scan results, working with developers to fix vulnerabilities during development.
• Assess and manage existing vulnerabilities using CVSS, define remediation actions and track progress.
• Support PCI-DSS compliance by collecting audit evidence with dev, QA and platform teams.
• Work with QA to ensure adequate security test coverage across functional and non-functional testing.

Conocimientos

Software development (.NET)

Application security

Threat modeling

Vulnerability management

AWS/Azure

Herramientas

Amadeus LSS

Amadeus Robotics

Descripción del empleo

Amadeus Polska Sp. z.o.o. is seeking an Application Security Engineer focused on development to identify and reduce risk across applications and support secure development of customer projects.

You will embed security into the full software lifecycle, covering threat modelling, secure coding, vulnerability management and PCI compliance. Collaborating with development and QA teams, you will ensure security is built in from the start rather than added later, and will work across architecture, dev