Security Engineer

LumApps is an AI-powered Employee Hub that supports companies in digital transformation of communication, collaboration, and engagement. It is a proven leader in the intranet software market, deployed by Fortune 500 clients worldwide, recognized by Gartner and Forrester, and part of the French Tech Next40/120 program. The company recently partnered with Beekeeper to expand its reach to frontline employees and has a team of over 600 employees across 11 global offices, including Krakow.

• Minimum 3 years of professional experience in application and cloud security.
• Ability to analyze WAF traffic and cloud telemetry tools such as GuardDuty, Sysdig to identify attack patterns and tune tools.
• Hands-on experience applying and auditing security best practices in AWS, GCP, Kubernetes, and containerized infrastructure.
• Strong understanding of application and API security principles such as OWASP Top 10 and OWASP API Top 10.
• Practical experience with source code analysis and ability to understand Python and/or Java.
• Experience with security monitoring tools: SAST, DAST, and SCA, including integration with CI/CD pipelines.
• Solid understanding of data security, encryption techniques, and secure data handling.
• Knowledge of network protocols (TCP/IP, DNS) and security concepts (WAFs, IDS).

Security Operations & Tooling:

• Maintain and monitor automated DAST, SAST, and SCA setups.
• Triage findings and collaborate with engineering teams to resolve vulnerabilities.

Incident Response:

• Participate in coordination and tracking of security incidents to ensure resolution within SLAs.

SDLC Contribution:

• Collaborate with developers to promote secure coding and API security.
• Review third-party components for vulnerabilities using SCA tools.

Testing & Assessments:

• Assist in managing security review processes including internal penetration testing and risk assessments.

AI Security:

• Apply security best practices to the organization's use of AI and LLM systems.

Knowledge Sharing:

• Support security awareness training and participate in internal knowledge-sharing sessions.

We aim to celebrate diversity and are committed to an inclusive environment. Applications from candidates of all backgrounds are encouraged.