Security Engineer

Billennium; Wrocław; On-site; PLN 130,000 - 180,000; Full time

Benefits offered by this job

Stable cooperation with international팀

Challenging projects with modern tech

Opportunities for professional growth

Job summary

Billennium is seeking a Professional Application Security Engineer to strengthen our AppSec capabilities. You will collaborate with development teams, architects and security professionals to embed security across the Software Development Lifecycle.

You will perform vulnerability analysis, threat modelling and secure coding guidance while working with SAST, DAST and SCA tools in CI/CD pipelines within cloud-native environments.

Qualifications

• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security or related field, or equivalent practical experience.
• 4–5 years of relevant professional experience in Application Security, Software Security or secure software development.
• Hands-on experience with application security assessments, vulnerability analysis and security testing.
• Able to write and review secure code and translate findings into actionable guidance.

Responsibilities

• Support development teams in integrating security throughout the SDLC and applying secure coding practices.
• Perform and support application security assessments and vulnerability analysis.
• Review and prioritize security findings and provide remediation guidance to developers.
• Work with SAST, DAST and SCA solutions and CI/CD pipelines.
• Contribute to threat modelling, security design reviews and established security patterns.
• Help improve app security tooling and controls in CI/CD pipelines.
• Support security of cloud-native apps, containers and Kubernetes environments.
• Communicate vulnerabilities and remediation options clearly to stakeholders.

Skills

Application security

Secure SDLC

OWASP Top 10

SAST/DAST/SCA

Programming (Python/Java/.NET)

Git/Jenkins

Cloud & Kubernetes

Education

Bachelor's or Master's in Computer Science/Cybersecurity

Tools

Semgrep

SonarQube

HCL AppScan

ZAP

Black Duck

Sonatype Lifecycle

Job description

Who we are

Billennium is a global technology company delivering innovative IT solutions and services. We help organizations transform their businesses through technology, combining technical expertise with a collaborative approach and a strong focus on continuous development.

About the role

We are looking for a Professional Application Security Engineer to strengthen our Application Security capabilities. You will work closely with development teams, architects and security professionals to embed security throughout the Software Development Lifecycle. The role combines hands‑on application security, secure software development, vulnerability assessment and DevSecOps. You will not only identify security risks, but also help engineering teams understand, prioritize and remediate them in a practical and sustainable way.

Your responsibilities

• Support development teams in integrating security throughout the SDLC and applying secure coding practices.
• Perform and support application security assessments and vulnerability analysis.
• Review and prioritize security findings and provide developers with practical remediation guidance.
• Work with SAST, DAST and SCA solutions, including Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck, Sonatype Lifecycle or comparable tools.
• Contribute to threat modelling, security design reviews and the implementation of established security patterns.
• Integrate and improve application security tools and controls within CI/CD pipelines.
• Support the security of cloud‑native applications, containers and Kubernetes environments.
• Help development teams implement relevant security standards, policies and requirements.
• Contribute to security guidance, awareness activities and training materials.
• Continuously improve AppSec processes, tooling and ways of working.
• Communicate vulnerabilities, risks and remediation options clearly to technical and non-technical stakeholders.

Must have

• 4–5 years of relevant professional experience in Application Security, Software Security, secure software development or a closely related area.
• Bachelor's or Master's degree in Computer Science, Cybersecurity, Information Security or a related discipline, or equivalent practical experience.
• Hands‑on experience with application security assessments, vulnerability analysis and security testing.
• Practical experience working with software development teams to identify and remediate security issues.
• Software development experience and the ability to write and review secure code.
• Good understanding of OWASP Top 10 and OWASP ASVS.
• Hands‑on knowledge of SAST, DAST and SCA, including their integration into CI/CD pipelines.
• Experience with AppSec tools such as Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck or Sonatype Lifecycle, or comparable solutions.
• Intermediate programming or scripting skills in Python, Java or .NET.
• Experience with Git, Jenkins, Docker, Kubernetes or comparable technologies.
• Understanding of cloud‑native application security, containers and Kubernetes.
• Knowledge of vulnerability management, risk assessment and security remediation processes.
• Strong analytical and problem‑solving skills.
• Ability to translate technical security findings into clear, actionable recommendations.
• Good written and verbal communication skills and a proactive, collaborative approach.

Nice to have

• Hands‑on experience with threat modelling and security architecture or design reviews.
• Knowledge of security frameworks and maturity models such as NIST, OWASP SAMM or OWASP DSOMM.
• Relevant Application Security or cybersecurity certifications.
• Understanding of emerging cybersecurity regulations and product security requirements, including the EU Cyber Resilience Act (CRA).
• Experience supporting security awareness initiatives or delivering secure development guidance to engineering teams.

What we offer

• Stable cooperation with an international technology company.
• Opportunity to work on challenging projects using modern technologies.
• Cooperation with experienced specialists in international teams.
• Opportunities to develop your technical expertise and professional competencies.
• A collaborative working environment focused on knowledge sharing and continuous development.