Security Engineer - Secure by Design, Hybrid Hours

Nortal; Kraków; Hybrid; PLN 180,000 - 260,000; Full time

Benefits offered by this job

24 working days vacation

11 national holidays

Health care: up to 10 paid sick days &

Mental health support

Learning platform access

English language classes

Flexible benefits budget

Hybrid work options

Team events & gifts

Job summary

Nortal is seeking a Security Engineer to embed security practices across the software delivery lifecycle and enable teams to build and release secure products with minimal friction. You’ll collaborate with engineering, product, platform, and security to integrate controls, vulnerability management, and secure engineering throughout day-to-day delivery.

This hands-on role involves threat modelling, reviews, incident response, and building reusable secure-by-default solutions.

Qualifications

• Experience applying security engineering practices within software, cloud, or platform environments.
• Knowledge of secure software development principles, threat modelling, vulnerability management, and security testing approaches.
• Understanding of application, infrastructure, and cloud security risks, attack vectors, and mitigation techniques.
• Experience with authentication, authorisation, encryption, secrets management, and data protection principles.
• Familiarity with security tooling for code analysis, vulnerability identification, security testing, and monitoring activities.
• Working knowledge of cloud security controls, Infrastructure-as-Code, container technologies, modern deployment practices, and incident response processes.
• Strong analytical, problem-solving, communication, and collaboration skills, with experience implementing security controls in agile delivery environments and working with cloud technologies.

Responsibilities

• Conduct threat modelling, secure code reviews, and architecture reviews using established security standards and guidance.
• Identify attack vectors, data flow weaknesses, and authentication and authorisation gaps, and provide actionable remediation guidance.
• Perform vulnerability discovery, security testing, remediation planning, validation, and prioritisation of findings using established risk frameworks.
• Configure and maintain security scanning, pipeline gates, secret detection, Infrastructure-as-Code security scanning, and other security automation.
• Embed security into domain delivery processes through secure design patterns, reusable artefacts, templates, and security requirements.
• Participate in security incident investigation activities, including evidence gathering, root cause analysis, remediation validation, and post-incident reviews.
• Support compliance, audit readiness, threat monitoring, and security knowledge sharing across product and platform teams.

Skills

Security engineering practices

Threat modelling

Vulnerability management

Security testing

Secure software development

Cloud security

Infrastructure as Code security

Container technologies

Incident response

Agile delivery

Communication & collaboration

Tools

Security tooling

Job description

Nortal is seeking a Security Engineer to embed security practices across the software delivery lifecycle and enable teams to build and release secure products with minimal friction. You’ll collaborate with engineering, product, platform, and security to integrate controls, vulnerability management, and secure engineering throughout day-to-day delivery.

This hands-on role involves threat modelling, reviews, incident response, and building reusable secure-by-default solutions.