Senior Security Engineer: Threat Modeling & DevSecOps

Lodzplus; Polska; Hybrid; PLN 180,000 - 240,000; Full time

Job summary

XTB is a global fintech company specializing in online trading. We are seeking a Senior Security Engineer to be a key technical expert bridging defensive security, offensive security, and DevSecOps.

You will help ensure the security of ICT processes and assets while collaborating with IT teams, DevOps, and Product Managers. You will drive incident response, threat modeling, security architecture reviews, and the evaluation of security tools across on-premises and cloud environments to protect

Responsibilities

• Responding to ICT security incidents and providing operational support for monitoring processes.
• Supervising and optimizing the enterprise cybersecurity tool ecosystem (e.g., SIEM, EDR/XDR, IDS/IPS).
• Maintaining, evaluating, and implementing new cybersecurity tools and solutions.
• Managing scans and conducting vulnerability assessments and mitigation for networks, web & mobile environments, on-premises and cloud infrastructure with tech teams.
• Proactively analyzing IT architecture security and performing threat modeling.
• Verifying and auditing IT infrastructure and service configurations against security best practices.
• Building and developing a Security Awareness culture through team education and trainings.

Job description

XTB is a global company from the financial industry, focusing on online trading of financial instruments. We are the largest FinTech in Poland and a leader in Central and Eastern Europe, and the range of our operations covers several countries, including Asia and South America. At XTB, we focus on the development of our employees, giving them opportunities to gain knowledge and skills in various fields, as well as offering a number of training and development programs. If you are looking for challenges and want to gain valuable experience in an international business environment, XTB is the right place for you.

We are a certified Great Place to Work company.

We are looking for a Senior Security Engineer to join our team. In this role, you will act as a key technical expert, bridging deep competencies across defensive security, offensive security, and DevSecOps. Your primary objective will be to ensure the security of ICT processes and assets, while regularly collaborating with IT teams, DevOps, and Product Managers.

Zakres obowiązków

• Responding to and handling ICT security incidents, as well as providing operational support for the monitoring process.
• Supervising and optimizing the enterprise cyber security solution ecosystem (e.g., SIEM, EDR/XDR, IDS/IPS).
• Maintaining, evaluating, and implementing new cybersecurity tools and solutions.
• Managing scans, as well as conducting vulnerability assessment and mitigation processes for networks, web & mobile environments, on-premises, and cloud infrastructure in collaboration with tech teams.
• Proactively analyzing IT architecture security and executing threat modeling processes.
• Regularly verifying and auditing IT infrastructure and service configurations based on security best practices.
• Building and developing a Security Awareness culture across the organization through team education, promoting best practices, and delivering dedicated training sessions.