Cybersecurity Specialist

Ceneo.pl to jeden z największych serwisów e-commerce w Polsce, lider wśród porównywarek cen i produktów w Europie. Firma działa od ponad 21 lat i współpracuje z największymi sklepami i platformami sprzedażowymi krajowymi i zagranicznymi.

• Strong knowledge of OWASP Top 10 and practical skills in detecting and describing security vulnerabilities in web applications
• Experience in penetration testing of web, API, and possibly mobile applications
• Practical knowledge of tools such as Burp Suite or similar
• Ability to collaborate with developers and product owners, translating technical risks into business language
• Familiarity with typical web application architecture (frontend/backend, microservices, cookies, sessions)
• Basic understanding of cloud environments (Microsoft Azure, Google Cloud Platform), CI/CD, and containerization (Docker, Kubernetes)
• Openness to develop skills in offensive security and DevSecOps
• Independence, initiative, and critical thinking abilities
• English proficiency sufficient to read documentation and vulnerability reports
• Willingness to work with a 4+1 schedule (four days in-office in Wrocław, one day remote), with an additional 30 days of occasional remote work annually

Nice to have:

• Experience in security code analysis
• Certifications in pentesting or web security
• Knowledge of bot detection, fraud prevention, and e-commerce application protections

• Identify and analyze vulnerabilities in web applications, including e-commerce, focusing on production and staging environments
• Conduct penetration tests on applications and infrastructure both manually and using automated tools
• Collaborate with development and DevOps teams to design secure web and backend solutions
• Support security incident response with analysis, recommendations, and remediation participation
• Advise on implementing authorization, authentication, data protection, and fraud prevention mechanisms
• Engage in developing internal security processes and reviewing application architecture for attack vectors
• Participate in creating and maintaining technical security policies and DevSecOps practices
• Optionally conduct short technical workshops and presentations for engineering teams

Wysyłając aplikację wyrażam zgodę, że administratorem moich danych osobowych jest Ceneo.pl sp. z o.o. z siedzibą we Wrocławiu (54-202), przy ul. Legnickiej 48A. Dane będą przetwarzane w celu rekrutacji oraz przyszłych procesów rekrutacyjnych prowadzonych przez Ceneo.pl. Gwarantowane są prawa według RODO. Dane będą przechowywane do 36 miesięcy od aplikacji lub do 10 lat w przypadku roszczeń.