Opis:
What we offer
- Knowledge sharing within our company.
- Agile and friendly atmosphere, non-violent communication and full respect for diversity.
- Possibility to choose from onsite (in Lodz, Poland) or hybrid work (meetings from time to time in our office in Łódź city centre).
- Remuneration on B2B contract: 1.100 - 1.400 PLN net/day or 19.000- 22.500 PLN gross on Employment Agreement (UoP).
- Possibility to engage not only technically, but also have an impact on the small company culture.
Wymagania:
Our requirements
- 5+ years or more of experience in application development and security.
- Experience with AWS, including EKS, multi-account setups, GuardDuty, KMS, Config, SSM, CloudFront, Firewall Manager, Shield, Network Firewall, WAF, IAM, CloudTrail, Security Hub, Secrets Manager, Inspector, Global Accelerator, ELB, EC2, Athena
- A strong working knowledge of current application and infrastructure risks, secure application design, and operating systems including experience with various Linux distributions and mobile operating systems (Android and iOS).
- Experience developing solutions with Terraform, Terragrunt, and/or Crossplane.
- Experience implementing DevSecOps pipeline tools such as static application security testing (code scanning, dependency scanning, secret scanning) dynamic application security testing, interactive application security testing, container vulnerability scanning, and infrastructure vulnerability scanning
- Excellent teaching, problem-solving, communication, and interpersonal skills.
- Knowledge of multiple languages including but not limited to Java, Kotlin, JavaScript, NodeJS, Go, C-Sharp, Swift, Python, bash, and SQL
Optional
- Experience with threat modelling, penetration testing, and security compliance (ISO 27001, SOC 2, NIST).
- Familiarity with zero-trust architecture, incident response, and forensics.
- Hands-on expertise in DevSecOps, CI/CD security, and secure coding.
Obowiązki:
Your responsibilities
- A bachelor's or associate's degree in IT, computer science, or equal experience. Advanced education or training in cloud/application security is preferred.
- Maintaining a thorough understanding of product and infrastructure security throughout the Product and Technology ecosystem and enabling product teams to secure the development and operations of their applications
- Planning, researching, designing, and developing secure application security capabilities and CI/CD pipelines.
- Developing, reviewing, and collaborating on the configuration of cloud account configuration, network isolation, security groups, access policies, network policies, VPNs, and overall compute platform security, including host- and container-based workloads.
- Integrating identity management systems, digital certificates, and secrets management with application workloads.
- Reviewing vulnerabilities with teams and suggesting strategies and tactics for remediation.
- Validating security implementations and participating in remediation and risk acceptance efforts.
- Working with platform and product teams to implement disaster recovery procedures and conducting security breach drills.
- Responding quickly and effectively to all security incidents and providing post-event analyses.
- Guiding the overall security community, cultivating a sense of security awareness, and arranging for continuous education.
- Maintaining and contributing to a growing threat modelling program, and assisting teams in continuous improvement in this area.
- Remaining up to date with the latest trends, standards, and products.
11 lut 2025;
from:
www.pracuj.pl