Senior/Principal Security Engineer IRC303167

GlobalLogic; Kraków; On-site; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Diversity

Equal opportunities

Inclusive environment

Career development

Flexible opportunities

Job summary

GlobalLogic Kraków is seeking a security-focused professional to own SSDF activities and oversee secure architecture for a cutting-edge fleet-decarbonization project. You will work closely with the Head of Engineering and CISO, collaborating with SOC, architects and development teams to address vulnerabilities and design secure solutions.

The role requires expertise in Azure cloud security, encryption, IAM and secure communications, with scripting experience in Bash/Python.

Qualifications

• Knowledge of secure architecture & secure design (e.g. Zero Trust)
• Strong knowledge of cybersecurity processes – SSDF by NIST
• Experience Azure cloud: Azure Kubernetes security, Azure IdP (Entra & B2C)
• Experience with scanning tools: SonarCloud & Snyk
• Vulnerabilities management
• Secure architecture design best practices (e.g. Zero Trust)
• Data encryption, Data anonymization, Secure communication (HTTPS – TLS, PKI)
• Identity and Access Management
• Scripting experience (Bash, Python, PS)

Responsibilities

• Owning and maintaining security activities required by SSDF process
• Reporting to stakeholders (Head of Engineering & CISO)
• Collaboration with SOC, Development, architects team
• Vulnerabilities management
• Solution design and requirements creation
• Supporting/advising development team in security challenges

Skills

Secure design

Secure architecture

Cybersecurity processes

Cross-team collaboration

Vulnerability management

Tools

Azure Kubernetes security

Azure IdP (Entra & B2C)

Azure Pipelines

SonarCloud

Snyk

Job description

Description

The overall project is designated for intelligent Fleet De-Carbonization based on an ambitious science-based idea targeting the achievement of net-zero emissions. The solution is planned to be a fully integrated software solution that can maximize efficiencies in both operational and energy supply management perspectives.

Requirements

• Knowledge of secure architecture & secure design (e.g. Zero Trust)
• Strong knowledge of cybersecurity processes – SSDF by NIST
• Cross-team collaboration
• Experience Azure cloud:
  • Azure Kubernetes security
  • Azure IdP (Entra & B2C)
  • Azure Pipelines
  • Experience with scanning tools : SonarCloud & Snyk
  • Vulnerabilities management
• Secure architecture design best practices (e.g. Zero Trust)
• Strong knowledge of secure design:
  • Data encryption
  • Data anonymization
  • Secure communication (HTTPS – TLS, PKI)
  • Identity and Access Management
  • Scripting experience (e.g. Bash, Python, PS)

Job responsibilities

• Owning and maintaining security activities required by SSDF process
• Reporting to stakeholders (Head of Engineering & CISO)
• Collaboration with SOC, Development, architects team
• Vulnerabilities management
• Solution design and requirements creation
• Supporting/advising development team in security challenges

What we offer

• Empowering Projects: With 500+ clients spanning diverse industries and domains, we provide an exciting opportunity to contribute to groundbreaking projects that leverage cutting-edge technologies. As a team, we engineer digital products that positively impact people’s lives.
• Empowering Growth: We foster a culture of continuous learning and professional development. Our dedication is to provide timely and comprehensive assistance for every consultant through our dedicated Learning & Development team, ensuring their continuous growth and success.
• DE&I Matters: At GlobalLogic, we deeply value and embrace diversity. We are dedicated to providing equal opportunities for all individuals, fostering an inclusive and empowering work environment.
• Career Development: Our corporate culture places a strong emphasis on career development, offering abundant opportunities for growth. Regular interactions with our teams ensure their engagement, motivation, and recognition. We empower our team members to pursue their career goals with confidence and enthusiasm.
• Comprehensive Benefits: In addition to equitable compensation, we provide a comprehensive benefits package that prioritizes the overall well-being of our consultants. We genuinely care about their health and strive to create a positive work environment.
• Flexible Opportunities: At GlobalLogic, we prioritize work-life balance by offering flexible opportunities tailored to your lifestyle. Explore relocation and rotation options for diverse cultural and professional experiences in different countries with our company.

About GlobalLogic

GlobalLogic, a Hitachi Group Company, is a trusted digital engineering partner to the world’s largest and most forward-thinking companies. Since 2000, we’ve been at the forefront of the digital revolution – helping create some of the most innovative and widely used digital products and experiences. Today we continue to collaborate with clients in transforming businesses and redefining industries through intelligent products, platforms, and services.