Overview:

Are you passionate and hardworking? Do you thrive in an entrepreneurial environment? Our Client is a fast-growing global enterprise software company. They focus on managing compensation and performance for the world’s largest companies. This means they work with the most exciting brands worldwide to support mission-critical business processes. They help their customers attract, retain, and motivate talent by offering their employees fair, transparent, and effective compensation. In that way, they help companies succeed while making their people happy.

At our Client’s company, you’ll be surrounded by passionate, hardworking, and smart individuals that are dedicated to their mission of making people happy. If that sounds inspiring to you, let’s get in touch!

.

Job purpose:

As Application Security Specialist, you will play a crucial role in ensuring the security of their software solution throughout its lifecycle. You will be part of the internal security team which manage infrastructure, operations, and product security. You will work closely with cross-functional teams, including development, operations, and client-facing teams, to drive security initiatives and maintain the highest level of application security.

.

Responsibilities:

• Collaborate with developers and product teams to strengthen knowledge around cybersecurity and promote secure coding best practices.
• Conduct code reviews, provide expertise, and contribute to secure development practices throughout the software development lifecycle.
• Assist in testing at later stages of the SDLC, including static and dynamic application security testing (SAST/DAST).
• Provide threat analysis and modelling skills to identify potential security risks and develop appropriate countermeasures.
• Ensure compliance with web application security standards and best practices.
• Utilise your technical writing skills to document security policies, procedures, and guidelines.
• Handle security support, monitoring, and incident response in rotation with other team members.

.

Must have:

• Bachelor’s or Master’s degree in Computer Science or Information Security, or extensive experience and demonstrated expertise in the field.
• Prior experience as a software developer or application engineer with a keen interest in cybersecurity.
• Clear conceptual understanding of the SDLC and working knowledge of web application vulnerabilities and their mitigations.
• Familiarity with challenges posed by open-source software, including dependency management and vulnerability assessments.
• Exposure to penetration testing and understanding of web application security principles (authentication, authorization, encryption, logging, security testing, etc.).
• Proficiency in the .NET Core framework and experience with a public cloud platform, preferably Microsoft Azure.
• Familiarity with static and dynamic application security testing (SAST/DAST) tools and techniques.
• Familiarity with SQL, ideally experience of Microsoft SQL Server.
• Excellent communication skills and a cooperative spirit to effectively work with developers and technical teams.
• Strong technical writing skills to document security policies, procedures, and guidelines.
• Ability to conduct threat analysis and modelling to identify potential risks and develop appropriate countermeasures.
• Ability to learn on the job and stay updated on the latest security technologies, trends, and practices.
• Full professional fluency in English is required – the team is international.

.

What they offer:

• Dynamic environment favouring initiative and autonomy
• Great opportunity to learn on the job and expand horizons 🙂
• Tax deductible expenses
• Bonus
• Private medical care, insurance, sports card.

.

Note: Prepare your CV in English (PDF), fill in the form, and apply! 🙂
Please include in your CV the following clause necessary for the recruitment process:

“I agree to the processing of personal data that I have made available voluntarily in the recruitment process by the Administrator of personal data, i.e. Dotcommunity Spółka z ograniczoną odpowiedzialnością [Ltd.] based in Cracow, 15 Żabiniec Street, 31-215 Cracow, registered in Poland, the Cracow’s District Court – Śródmieście, XI Commercial Division of the National Court Register under number 0000468484, VAT number: 9452174499, (“Dotcommunity”) in order to carry out the recruitment process for the Application Security Specialist position on the basis of Art.6 item 1a of the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation)”

.

.
Dotcommunity is registered in the Register of Employment Agencies (KRAZ) under the number 9904.