Security Operations Specialist

On The Spot Development; Województwo mazowieckie; On-site; PLN 83,000 - 152,000; Full time

Job summary

On The Spot Development is building a local Polish team for a US-based B2B technology company and seeks a Security Operations Specialist to own information security operations. You’ll collaborate with the engineering team to implement robust security practices, manage vulnerability programs, and coordinate penetration testing.

The role is a 6-month project with potential extension and requires overlap with the US team until 22:00 local time.

Qualifications

• Proven experience in security monitoring and vulnerability management.
• Experience coordinating penetration testing and remediation follow-up.
• Practical experience with Cloud Security and security frameworks (SOC 2, NIST).

Responsibilities

• Own vulnerability management across cloud infra, apps, APIs, dependencies and containers.
• Coordinate penetration testing engagements and drive remediation of findings.
• Maintain security docs, metrics, remediation records, and playbooks.
• Review and improve security processes and controls across engineering.
• Support cross-functional security initiatives and risk reduction.

Skills

Security monitoring

Vulnerability management

Penetration testing

Cloud security

SOC 2

NIST

Independent work

Job description

On The Spot brings startups and disruptive tech companies to the local market, offering engineers the opportunity to work on innovative, high-impact products. Join us and become a member of their R&D team while we take care of employment, HR support, a benefits package, and an enjoyable work environment.

We are building a local Polish team for a customer who is a US-based B2B technology company.

They develop an AI-powered skills assessment and workforce development platform. It helps enterprises assess employees’ and candidates’ capabilities, identify skill gaps, and guide development across areas such as AI, data, and technology. Companies use these insights to support hiring, upskilling, and workforce planning.

We are looking for a Security Operations Specialist to take ownership of information security operations and collaborate closely with the engineering team to ensure robust security practices are in place.

Please note:

• This is a 6-month project role, with a potential possibility of extention.
• The role requires working closely with the US team, with working hours overlapping until 10:00 PM Warsaw time.

Responsibilities

• Own vulnerability management across cloud infrastructure, applications, APIs, dependencies, containers, secrets, and infrastructure-as-code where applicable;
• Coordinate penetration testing engagements and drive the remediation of identified findings;
• Maintain security documentation, metrics, remediation records, and technical response playbooks;
• Review and improve security processes and controls across the entire engineering organization;
• Support cross-functional security initiatives, technical readiness efforts, and transitions involving systems, tooling, and controls;
• Maintain cloud security standards and align processes with security frameworks such as SOC 2 and NIST;
• Partner with technical teams on security monitoring, logging, identity and access, secure configuration, incident response, and technical risk reduction.

Requirements

• Proven experience in security monitoring and vulnerability management;
• Experience coordinating penetration testing and following up on findings;
• Practical experience with Cloud Security and industry frameworks such as SOC 2 and NIST;
• Proactive approach with the ability to work independently, prioritize tasks, and deliver results in a lean team environment.

Nice-to-Have

• Hands-on experience using AI tools to enhance security operations and streamline workflows.