About the Role
Kogo poszukujemy?
Strong understanding of security domains, especially security findings assessment and remediation areas, supported by at least 2 years of experience
Governance knowledge, proven by experience in at least one of the security findings fields: Workstation vulnerabilities, Servers vulnerabilities, Baseline deviations, Containers vulnerabilities, Static Application Security Testing (SAST), External Attack Surface Management (EASM) findings, Threat Modelling findings, API-related findings
Knowledge and experience within the fields of problem management, Secure DevOps, DORA, OWASP
Advanced trouble-shooting and conceptual skills with the ability to come up with solutions to uncommon problems related to remediation actions
Knowledge of tools & methodologies for security findings assessment and enrichment
Ability to interpret results using a variety of techniques, ranging from simple exploratory data analysis to statistical modelling
Good understanding of risk based approach and management
Prepare and deliver presentations to stakeholders
Fluent English
Nice to have:
Demonstrated experience in automation, preferably using Python, Apache Airflow, and/or Power Automate
Practical application of AI technologies in governance processes and automation workflows
Czym będziesz się zajmować?
The role is remote, but it requires occasional visits to the office in Gdańsk (for example, once per quarter).
Identifying remediation gaps and driving towards their resolution
Advising stakeholders on the available solutions and actions that must be undertaken
Analyzing scanning results to define concrete steps directed at de-risking the bank
Collaborating with remediation accountable and responsible stakeholders
Ensuring security findings are understood and remediation pace is adequate
Maintain a proactive approach to governance and demonstrate autonomy in task execution
Tech Stack
cybersecuritysecurity findings assessmentvulnerability assessmentSASTEASMthreat modellingAPI securityOWASPsecure devopsPython