AppSec Expert

• Experience in programming languages (Backend: Java, Scala, Kotlin; Frontend: TypeScript, Angular)
• Knowledge of secure coding practices to guide R&D teams in avoiding vulnerabilities and security flaws
• Experience with security frameworks and standards (OWASP Top Ten, ISO)
• Experience working with certification requirements and supporting R&D to address security questions
• Good understanding of web application architecture and low-level communication protocols
• Proficiency with security tools and technologies (firewalls, intrusion detection systems, encryption, static and dynamic analysis tools, penetration testing tools)
• Experience in assuring security for cloud-deployed applications and knowledge of security tools available in the cloud
• Good communication skills for working with technical and non-technical audiences
• Problem-solving skills
• Critical thinking
• Continuous learning and adaptability

• Close collaborating with R&D teams to integrate and assure security at every stage in the software development lifecycle
• Regular security reviews and threat modeling of applications
• Integrating security tools into processes and proactively introducing changes to address any gaps
• Responding to security incidents
• Raising awareness among teams about application security, secure coding practices, security standards, security threats, and countermeasures
• Ensuring applications meet certifications requirements in scope of security (e.g. SAS SM, PCI DSS)
• Ensuring teams follow internal and external security standards

Additional responsibilities:

• Define and maintain Solution, IT and Cloud Security solutions for protection, detection, response, and recovery aligned with business needs and compliance
• Define and maintain cybersecurity architecture blueprint for Solution, IT, Cloud, or hybrid environments
• Advise on technical solutions and advocate for secure architectures ensuring regulatory compliance
• Act as level 3 support expert for security solutions operated by IDEMIA
• Investigate and analyze existing Solution, IT and Cloud Security solutions and develop enhanced security methods for cloud environments
• Define and maintain technical guidelines and procedures for Solution, IT and Cloud Security
• Support projects to integrate cybersecurity requirements ensuring security by design compliance with standards and regulations (GSMA, PCI-DSS, NIST)
• Perform and deliver risk analyses (EBIOS Risk Manager, ISO / CEI 27005) for complex projects
• Review architecture regularly, identify gaps, and recommend cybersecurity improvements
• Analyze security risks associated with new technologies or information systems
• Conduct audits to verify compliance with Global Security Policies
• Summarize customer needs and propose complex security designs and solutions autonomously
• Participate in strategy and policy definition for cybersecurity architecture
• Provide expertise for cybersecurity incidents
• Propose and apply cybersecurity best practices
• Coach less experienced cybersecurity architects

Only candidates located in Poland are considered due to the location mention: Remote, Łódź, Poland.