Senior Security Engineer (Application Security)

Headquartered in Gdańsk since 2005, the company now sells in 40 countries and supports customers in 11 languages. We started in 2005 and have grown to about 640 people.

Position summary:

We are creating this position because the workload has grown. Security engineering role focused on identity, cloud configuration and detection. You'll work closely with platform and IT. Hybrid. You will need to be in Gdańsk at least two days per week.

In this role you will:

• Automate security checks in CI/CD pipelines.
• Review code and pull requests for security issues.
• Design and maintain SSO, MFA and conditional access with Okta or Entra ID.
• Write secure coding guidelines and run developer training.
• Respond to security incidents and lead the technical investigation.
• Coordinate external penetration tests and track remediation.
• Run threat modelling sessions with engineering teams on new features and architecture changes.
• Harden AWS, Azure or GCP accounts and fix misconfigurations found by Wiz, Prisma Cloud or Security Hub.

Minimum qualifications:

• 5+ years in security engineering, application security or a related engineering role.
• Experience with SIEM, EDR or vulnerability management tools.
• Hands-on cloud security experience in AWS, Azure or GCP.
• Good judgment on risk: knowing what to fix now and what can wait.
• Strong knowledge of the OWASP Top 10 and common web vulnerabilities.
• Ability to explain security issues to engineers without lecturing them.

Nice to have:

• OSCP, OSWE, CISSP or a cloud security certification (AWS Security Specialty, AZ-500)
• Malware analysis or digital forensics background.
• Contributions to security tools or published CVEs.
• Running a bug bounty program.

Pay and benefits:

• Private medical care.
• Extra annual leave days.
• Training budget.
• Annual bonus.
• Cafeteria benefit system.
• Language courses.

Start: Within 30 days.

Demo job created on 11jobs for testing and demonstrations. It is not an actual opening at Trestleshore Labs.