Senior Security Expert

Engagement: 3 months at 0.5 FTE, followed by 0.25 FTE from 2027

Additional opportunities: Potential involvement in internal security projects
Language: English – minimum B2+

We are looking for a Senior Security Expert to support the development and ongoing security of a complex digital platform operating in the recruitment and temporary employment sector.

The client’s ecosystem consists of web and mobile applications as well as an administrative back office. The platform enables workers to search for temporary job opportunities, while employers and recruiters use it to identify candidates who best match their recruitment needs.

The role focuses on strengthening Application Security and DevSecOps practices, supporting engineering teams, managing security risks, and ensuring security is embedded throughout the software development lifecycle.

This is also an opportunity to join a project involving the takeover and further development of an existing system previously maintained by an external provider, making your expertise particularly important in establishing and continuously improving security processes and standards.

Wymagania

• Strong knowledge of Secure Development Lifecycle (SDLC) practices, including Microsoft SDL.

• Hands-on knowledge of Application Security and DevSecOps.

• Experience with Threat Modelling and security risk management.

• Experience in Vulnerability Management.

• Experience coordinating or managing Penetration Testing activities.

• Experience conducting Secure Architecture Reviews.

• Strong knowledge of OWASP Top 10 and OWASP ASVS.

• Practical understanding of SAST, DAST, and Dependency Scanning.

• Knowledge of Secure Web and API Development principles.

• Knowledge of Azure Security.

• Ability to work effectively with both engineering teams and business stakeholders.

Obowiązki

• Build and develop application security processes.
• Support engineering teams in the areas of Application Security and DevSecOps.
• Manage security risks.
• Coordinate security assessments and audits.
• Perform threat modelling activities.
• Oversee vulnerability management.
• Coordinate penetration testing activities.
• Conduct secure architecture reviews.
• Act as a trusted security advisor for engineering teams and business stakeholders.

Oferujemy

• Compensation of up to PLN 220 net/hour on a B2B contract

• Flexible payment options

• Short 14-day invoice payment term

• Comprehensive private healthcare package

• Access to the MyBenefit cafeteria platform, including the option to order Multisport cards and prepaid cards for IKEA, Zalando, Notino, and many other brands