Principal SME Web Application Security Protection

Experienced expert in web application security joining a global Cybersecurity team responsible for developing and maintaining application protection mechanisms in cloud environments.

• Experience working with WAF (e.g., Akamai, AWS WAF, or similar)
• Experience with at least one cloud provider (AWS, Azure, or GCP)
• Knowledge of web application security issues
• Experience analyzing logs and working with monitoring systems (e.g., Splunk)
• Ability to respond to security incidents
• Knowledge of HTTP, HTML, JavaScript sufficient for threat analysis
• Experience in cross-team collaboration and implementing security standards
• Ability to create technical and process documentation
• Good command of English

Nice to have:

• Cloud certifications (AWS / Azure / GCP)
• Experience working in regulated environments (e.g., financial sector)
• Experience with DDoS protection solutions
• Knowledge of industry standards (e.g., OWASP)

• Designing and implementing WAF (Web Application Firewall) rules
• Supporting application migration to central security mechanisms
• Monitoring and analyzing threats such as DDoS and Layer 7 attacks
• Responding to and analyzing security incidents
• Collaborating with DevOps, architecture, and application teams
• Creating security standards and guidelines for the organization
• Analyzing logs and configuring alerts and monitoring systems
• Reporting compliance with security standards
• Mentoring and supporting less experienced team members

Work location: Kraków - hybrid work model with 6 days/month in office