Senior Security Architect (f/m/x)
⚲ Białystok, Centrum, Bydgoszcz, Gdańsk, Oliwa, Katowice, Kraków, Podgórze, Lublin, Łódź, Śródmieście, Piła, Poznań, Wilda, Rzeszów, Szczecin, Toruń, Warszawa, Mokotów, Wrocław, Fabryczna
Do uzgodnienia
Wymagania
- OWASP
- OWASP ASVS
- Burp Suite
- OWASP ZAP
- SIEM
- DevSecOps
- REST
- Git
- Linux
Opis stanowiska
Nasze wymagania:
Minimum 8 years of experience in application security architecture
Experience in delivering projects for the healthcare industry
Deep knowledge of OWASP standards and secure SDLC
Strong experience with security testing tools such as Burp Suite and OWASP ZAP
Practical experience with SIEM tools like Splunk or Sentinel
Hands-on expertise in DevSecOps practices and tools
Proficiency in designing and implementing REST APIs
Strong command of Git and CI/CD processes, combined with solid experience working in Linux and Microsoft Windows environments
Fluent Polish
O projekcie:
We are looking for an experienced Security Architect to lead the design and governance of security solutions across multiple web applications and systems.
In this role, you will be responsible for shaping secure architecture, overseeing application security practices, and working closely with development and DevOps teams to ensure secure delivery in a complex enterprise environment.
Zakres obowiązków:
Designing and evolving application security architecture across multiple systems
Defining and enforcing security standards for web applications
Supervising penetration testing and guiding vulnerability remediation according to OWASP ASVS
Collaborating with development, DevOps, and PM teams on secure design and delivery
Supporting system integration and ensuring security alignment across environments
Leading security testing, audits, and compliance activities
Defining and aligning security policies with ISO 27001 standards
Contributing to SIEM use cases and improving security monitoring
Supporting the selection and implementation of DevSecOps tools
Creating and maintaining security and technical documentation
Oferujemy:
Great Place to Work since 2015 - it’s thanks to feedback from our workers that we get this special title and constantly implement new ideas
Employment stability - revenue of PLN 2.1BN, no debts, since 2006 on the market
We share the profit with Workers - over PLN 76M has already been allocated for this aim since 2022
Attractive benefits package - private healthcare, benefits cafeteria platform, car discounts and more
Comfortable workplace – class A offices or remote work
Dozens of fascinating projects for prestigious brands from all over the world – you can change them thanks to Job Changer application
PLN 1 000 000 per year for your ideas - with this amount, we support the passions and voluntary actions of our workers
Investment in your growth – meetups, webinars, training platform and technology blog – you choose
Fantastic atmosphere created by all Sii Power People
Minimum 8 years of experience in application security architecture
Experience in delivering projects for the healthcare industry
Deep knowledge of OWASP standards and secure SDLC
Strong experience with security testing tools such as Burp Suite and OWASP ZAP
Practical experience with SIEM tools like Splunk or Sentinel
Hands-on expertise in DevSecOps practices and tools
Proficiency in designing and implementing REST APIs
Strong command of Git and CI/CD processes, combined with solid experience working in Linux and Microsoft Windows environments
Fluent Polish
O projekcie:
We are looking for an experienced Security Architect to lead the design and governance of security solutions across multiple web applications and systems.
In this role, you will be responsible for shaping secure architecture, overseeing application security practices, and working closely with development and DevOps teams to ensure secure delivery in a complex enterprise environment.
Zakres obowiązków:
Designing and evolving application security architecture across multiple systems
Defining and enforcing security standards for web applications
Supervising penetration testing and guiding vulnerability remediation according to OWASP ASVS
Collaborating with development, DevOps, and PM teams on secure design and delivery
Supporting system integration and ensuring security alignment across environments
Leading security testing, audits, and compliance activities
Defining and aligning security policies with ISO 27001 standards
Contributing to SIEM use cases and improving security monitoring
Supporting the selection and implementation of DevSecOps tools
Creating and maintaining security and technical documentation
Oferujemy:
Great Place to Work since 2015 - it’s thanks to feedback from our workers that we get this special title and constantly implement new ideas
Employment stability - revenue of PLN 2.1BN, no debts, since 2006 on the market
We share the profit with Workers - over PLN 76M has already been allocated for this aim since 2022
Attractive benefits package - private healthcare, benefits cafeteria platform, car discounts and more
Comfortable workplace – class A offices or remote work
Dozens of fascinating projects for prestigious brands from all over the world – you can change them thanks to Job Changer application
PLN 1 000 000 per year for your ideas - with this amount, we support the passions and voluntary actions of our workers
Investment in your growth – meetups, webinars, training platform and technology blog – you choose
Fantastic atmosphere created by all Sii Power People
🔍 Dekoder Ogłoszenia
🔴
lead the design and governance of security solutions across multiple web applications and systems
Oznacza to, że będziesz odpowiedzialny za architekturę bezpieczeństwa, ale faktyczny wpływ na decyzje może być ograniczony przez istniejące procesy i strukturę firmy.
🔴
complex enterprise environment
Sugeruje to pracę w dużej, często biurokratycznej organizacji, gdzie wprowadzanie zmian może być powolne i wymagać wielu zgód.
🔴
Supervising penetration testing and guiding vulnerability remediation
Może oznaczać, że będziesz nadzorował proces, ale niekoniecznie będziesz wykonywał testy samodzielnie lub miał bezpośredni wpływ na priorytetyzację napraw.
🔴
working closely with development and DevOps teams
W praktyce może oznaczać, że będziesz musiał przekonywać inne zespoły do swoich rozwiązań, a nie tylko je wdrażać.
🟡
Fluent Polish
Wymóg płynnej znajomości języka polskiego, co jest standardowe dla pracy w Polsce, ale warto to zauważyć.