Senior Cyber Security Engineer

HeadHR; Warszawa; On-site; PLN 250,000 - 350,000; Full time

Benefits offered by this job

Private healthcare with rehabilitation

Extra parental days (6/yr)

Cafeteria

Internal training

Job summary

HeadHR is seeking a Senior Cyber Security Engineer based in Warsaw, Poland for a hands-on role involving security requirements for cloud and on-prem systems. The candidate will perform threat modeling, security reviews, and lead security initiatives while working closely with IT and non-IT teams.

The ideal candidate must have at least 5-8 years of experience in cybersecurity and possess strong problem-solving and documentation skills. Benefits include private healthcare and training opportunities.

Qualifications

• 5–8+ years of experience in cloud applications or cybersecurity.
• Hands-on experience in performing threat modeling and security reviews.
• Strong communication and collaboration skills.

Responsibilities

• Conduct security reviews and risk assessments for cloud and on-prem systems.
• Lead implementation of strategic security initiatives.
• Support security vs business tradeoff decisions.

Skills

Threat modeling

Security reviews

Collaboration

Problem-solving

Documentation skills

Education

Bachelor’s degree in computer science, Cybersecurity, or a related field

Tools

OWASP

Static/dynamic code analysis tools

Job description

Profile: Senior Cyber Security Engineer

Hands‑on role. Review applications, define/verify security requirements for IaaS/PaaS/on‑prem and SaaS; identify risks to confidentiality, integrity, availability.

Key Activities

• Product security reviews: verify security requirements, maintain security baselines.
• Architecture & design: threat modeling, risk assessment, security‑by‑design guidance.
• Governance: define security principles, policies, secure development lifecycle, embed security into product lifecycle.
• Vulnerability analysis: static/dynamic code analysis, security scanning, investigate reports, coordinate application incident response, define/oversee pentests.

Core Responsibilities

• Deep architecture and security reviews (cloud & on‑prem) to identify vulnerabilities.
• Design application security requirements; perform threat modeling; manage application pentests.
• Support security vs business tradeoff decisions.
• Lead implementation of strategic security initiatives.

Offer

• Location: Poland / Warsaw — remote cooperation.
• Employment: contract of employment (with Client).
• Benefits: private healthcare with rehabilitation; extra parental days (6/yr); cafeteria; internal training.
• Cooperation: long‑term.

Kogo poszukujemy?

Requirements

• Bachelor’s degree in computer science, Cybersecurity, or a related field (or equivalent experience).
• 5–8+ years of experience in cloud applications, cybersecurity, or related domains.
• Strong experience performing threat modelling and security reviews.
• Possess hands‑on experience onwhitebox,greybox, andblackboxassessments or oversight applications pen tests focusing on OWASP.
• Strong documentation skills.
• Experience working with various IT Teams and non-IT teams of various disciplines.
• The ability to assimilate complex technical challenges andprovideappropriate security advice that delivers the right business outcomes.
• Self‑motivated,experiencein solving complex problems.
• Strong communicationand collaboration skills whofeelscomfortable working closely with Architecture and Infrastructure teams.
• Ability to learn and applynew technologiesquickly and in complex deployments.

Nice to have

• Relevant certifications: CISSP, CCSP, or equivalent.
• Expert knowledge of zero trust, identity, threat detection, and threat modelling and security practices.