Senior Application Security & Vulnerability Engineer

EY GDS; Wrocław; On-site; PLN 120,000 - 180,000; Full time

Benefits offered by this job

Continuous learning

Career growth

Leadership insights

Diversity & inclusion

Job summary

EY Global Delivery Services (GDS) is seeking an Information Security Analyst to join the TARP function in Wrocław. The role focuses on security testing, audits, and compliance activities to assure EY technology products meet stringent security standards and certifications.

You will collaborate with cross-functional teams to identify risks, implement remediation, and support ongoing ISQM, SOC, and regulatory requirements across EY platforms and client projects.

Qualifications

• 5 to 8 years of application security assessment experience.
• Hands on experience of Web, thick client, Mobile Application security reviews.
• Exposure to various manual testing methodologies and tooling.
• Able to communicate security concepts to non-technical stakeholders.

Responsibilities

• Prepare detailed security review reports and remediation guidance.
• Research new application security vulnerabilities and attack vectors.
• Support the team in updating their skill and knowledge.
• Lead strategic initiatives and mentoring new team members.
• Automate scanning processes within the CI/CD pipeline to ensure continuous security testing of applications as code is developed.

Skills

Application security

Manual testing

Security auditing

Communication skills

Vulnerability assessment

Cross-functional collaboration

Education

Bachelor's degree in Information Technology or Cyber Security

Security certifications (CEH, CISSP, CISM, CISA)

Tools

Burp Suite

Nessus

Nmap

Wireshark

CheckMarx

WebInspect

Qualys WAS

WhiteSource

echomirage

Job description

EY Global Delivery Services (GDS) is seeking an Information Security Analyst to join the TARP function in Wrocław. The role focuses on security testing, audits, and compliance activities to assure EY technology products meet stringent security standards and certifications.

You will collaborate with cross-functional teams to identify risks, implement remediation, and support ongoing ISQM, SOC, and regulatory requirements across EY platforms and client projects.