Senior Security Validation Engineer: Pen Testing & Automation

GlobalLogic; Kraków; On-site; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Empowering Projects

Empowering Growth

DE&I Matters

Career Development

Comprehensive Benefits

Flexible Opportunities

Job summary

GlobalLogic is building a dedicated security validation team focused on vulnerability assessment and security testing across its products and systems. The team runs structured testing campaigns including penetration testing and secure code review, while developing automated test suites to scale the process.

Collaboration with AI models accelerates work, while hands-on security engineering remains the core. The role demands experience in vulnerability discovery, triage, and writing automated

Qualifications

• 4+ years in cybersecurity, security testing, or software engineering with a strong security focus.
• Structured, methodical approach to testing – able to plan and document, not just test ad-hoc.
• Good written English – reporting is a significant part of the role.
• Hands-on experience in vulnerability assessment and penetration testing (web, API, network, or infrastructure).
• Secure code review experience.
• Solid coding skills (Python preferred) for automation, tooling and test scripts.
• Experience writing automated tests and building them into repeatable suites.
• Strong understanding of vulnerability classes (OWASP Top 10, CWE) and CVE/CVSS triage.
• Familiarity with standard security tooling (e.g. Burp Suite, Nmap, SAST/DAST scanners).

Responsibilities

• Perform vulnerability assessments and penetration testing against applications, services and infrastructure.
• Conduct secure code and configuration reviews.
• Triage and validate findings; assess severity, eliminate false positives, support remediation.
• Write and maintain automated security tests and tooling.
• Design test plans, execute testing campaigns, document and report results.
• Evaluate AI-assisted approaches to security testing and help integrate what works into the workflow.

Skills

Cybersecurity

Security testing

Penetration testing

Secure code review

Python automation

Vulnerability assessment

OWASP Top 10

CVE/CVSS triage

Tools

Burp Suite

Nmap

SAST/DAST scanners

CI/CD security tooling

Job description

GlobalLogic is building a dedicated security validation team focused on vulnerability assessment and security testing across its products and systems. The team runs structured testing campaigns including penetration testing and secure code review, while developing automated test suites to scale the process.

Collaboration with AI models accelerates work, while hands-on security engineering remains the core. The role demands experience in vulnerability discovery, triage, and writing automated