Senior App Security & Vulnerability Engineer

EY; Poland; Hybrid; PLN 150,000 - 210,000; Full time

Benefits offered by this job

Continuous learning

Diverse and inclusive culture

Leadership development

Job summary

EY GDS Poland is seeking an Information Security Analyst to join the Technology Assurance team. The role focuses on security reviews, audits, and compliance across EY's apps and infrastructure.

You will collaborate with cross-functional teams to protect client data and EY systems, including ISMS and UK/EU security standards. Hybrid in-office and remote work, with 2 days in office and 3 days remote from Wrocław or Katowice.

Qualifications

• 5–8 years of experience in application security assessment.
• Hands-on web, thick client, mobile app security reviews.
• Understanding of manual testing methodologies and vulnerability lifecycle.
• Knowledge of security controls (firewalls, IDS/IPS, encryption).
• Ability to coordinate with vendors and cross-functional teams.

Responsibilities

• Prepare detailed security review reports and remediation guidance.
• Research new application security vulnerabilities and attack vectors.
• Support the team in updating skills and knowledge.
• Lead strategic initiatives and mentor new team members.
• Continuously improve quality of service.
• Configure, manage, and update vulnerability tooling for accuracy.
• Collaborate with development teams to configure self-scan tools.
• Interpret scan results and prioritize remediation.
• Automate scanning in the CI/CD pipeline for secure code.

Skills

Burp Suite

Nmap

Wireshark

Nessus

WebInspect

Qualys WAS

Checkmarx

Secure coding basics

C/C++

Education

Bachelor's or above in IT or Cyber Security

Tools

WebInspect

Qualys WAS

Checkmarx

WhiteSource

Job description

EY GDS Poland is seeking an Information Security Analyst to join the Technology Assurance team. The role focuses on security reviews, audits, and compliance across EY's apps and infrastructure.

You will collaborate with cross-functional teams to protect client data and EY systems, including ISMS and UK/EU security standards. Hybrid in-office and remote work, with 2 days in office and 3 days remote from Wrocław or Katowice.