Application Security Specialist

Our requirements

• Bachelor’s or Master’s degree in Computer Science, Information Security, Cybersecurity or a related field, or equivalent practical experience.
• 4–5 years of relevant experience in application security, software security, secure software development or a closely related technical field.
• Hands-on experience with application security assessments, vulnerability analysis or security testing.
• Experience working with software development teams to identify and address security issues.
• Experience writing code and developing digital products; intermediate programming or scripting skills in Python, Java or .NET.
• Experience with AppSec tools such as Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck or Sonatype Lifecycle (or comparable).
• Good understanding of common application vulnerabilities and security standards: OWASP Top 10, OWASP ASVS and other relevant OWASP standards.
• Familiarity with SAST, DAST and SCA and their integration into CI/CD pipelines.
• Experience with cloud-native application security, containers or Kubernetes.
• Familiarity with DevSecOps practices, version control and CI/CD pipelines, preferably Jenkins, Git, Docker or Kubernetes.
• Understanding of vulnerability management, risk assessment and remediation processes.
• Soft skills: strong analytical and problem-solving skills, attention to detail, clear written and verbal communication (including explaining technical findings to different audiences), collaborative approach, proactive mindset and ownership, willingness to learn and share knowledge.
• Experience with threat modelling and security design reviews.
• Familiarity with NIST, OWASP DSOMM and OWASP SAMM.
• Relevant application security or cybersecurity certifications.
• Awareness of emerging regulations such as the EU Cyber Resilience Act (CRA).

Your responsibilities

• Support development teams in integrating security into the software development lifecycle and applying secure coding practices.
• Perform and support security assessments using application security tools, analyze findings, prioritize risks and guide teams in remediating vulnerabilities.
• Work with SAST, DAST and SCA tools and other security testing technologies to identify potential risks in applications.
• Contribute to threat modelling, security design reviews and the application of established security patterns.
• Support the integration and improvement of AppSec tools and processes within CI/CD pipelines and development workflows.
• Contribute to security awareness activities, training materials and guidance for development teams.
• Help teams implement relevant security requirements, standards and internal policies.
• Identify opportunities to improve AppSec processes, tooling and ways of working.
• Communicate security findings, explain risks and support practical remediation together with developers, architects and security colleagues.

About the project

This is how we organize our work

What we offer

• 2 days at the office in Wroclaw required

Benefits

• sharing the costs of sports activities
• private medical care
• life insurance
• integration events

Recruitment stages

• 1.
  Rozmowa z rekruterem ok. 15 min
• 2.
  Spotkanie rekrutacyjne z klientem ok. 60 min

IT CONNECT Sp. z o.o. Sp. k.