Software Penetration Tester — DevSecOps & Cloud Security

AVEVA; Kraków; Híbrido; PLN 80.000 - 130.000; Jornada completa

Descripción de la vacante

ETAP, part of AVEVA, is seeking a Software Pentester in Krakow, Poland for a full-time role. You will secure software applications and infrastructure, drive privacy and cybersecurity features, and work in a fast-paced Agile environment.

The position requires deep expertise in security testing, threat modelling, and DevSecOps practices within cloud-based server development. You will lead vulnerability assessments, oversee remediation, and build robust security monitoring and reporting

Formación

• Experience performing security testing on software applications and infrastructure.
• Strong understanding of DevSecOps, NIST, OWASP, MITRE and CWE frameworks.
• Proficient in multiple programming languages: C#, Perl, JavaScript, Python, PHP.

Responsabilidades

• Assess architectures and designs for security vulnerabilities and propose mitigations.
• Oversee remediation of identified security flaws in development platforms.
• Build monitoring, auditing, and reporting frameworks for security/compliance artifacts.
• Lead vulnerability assessment and penetration testing (VAPT) across multiple R&D apps.
• Integrate SAST/DAST into CI/CD pipelines.

Conocimientos

Penetration testing

Vulnerability assessment

DevSecOps

Threat modelling

Security architecture

Networking fundamentals

Cloud security

Educación

Bachelor/Master in CS/IT/EE/EC/EI

Herramientas

HP Fortify

ThreatModeler

Checkmarx

Aqua

Puppet

Chef

Kubernetes

Docker

NESSUS

NMap

BurpSuite

ZAP

Descripción del empleo

ETAP, part of AVEVA, is seeking a Software Pentester in Krakow, Poland for a full-time role. You will secure software applications and infrastructure, drive privacy and cybersecurity features, and work in a fast-paced Agile environment.

The position requires deep expertise in security testing, threat modelling, and DevSecOps practices within cloud-based server development. You will lead vulnerability assessments, oversee remediation, and build robust security monitoring and reporting