Platform Security Remediation Engineer

Join a global technology team responsible for securing and maintaining a complex digital ecosystem supporting millions of users worldwide. The role involves vulnerability management across a large public-facing web estate within a global, distributed engineering environment.

• Strong hands-on engineering background
• Experience in vulnerability management, security remediation, or application/infrastructure security
• Knowledge of web application security, CDN and WAF technologies, TLS, DNS, and HTTP security mechanisms, common web attack vectors, and mitigation techniques
• Experience with cloud platforms, ideally Azure
• Ability to investigate, reproduce, and assess vulnerability findings beyond automated scanner results
• Strong stakeholder management and communication skills
• Fluent English

Nice to have:

• Experience with WAF policy management
• Experience with enterprise CMS platforms (e.g., Sitecore)
• Scripting or automation skills (Python, PowerShell)
• Experience working within highly regulated environments
• Security certifications such as CISSP, OSCP, Azure Security Engineer Associate

• Own and maintain a consolidated view of security vulnerabilities across infrastructure, cloud, applications, CDN, WAF, and CMS layers
• Validate, triage, and prioritize findings from vulnerability scanners, penetration tests, security reviews, and vendor advisories
• Assess the real business and technical risk of identified vulnerabilities and challenge false positives where appropriate
• Drive remediation activities across engineering teams and track issues through to successful resolution
• Support patching initiatives across platforms, operating systems, runtimes, and third-party components
• Collaborate with engineers to design mitigation strategies and long-term security improvements
• Produce security posture and remediation reports for technology and risk stakeholders
• Contribute to automation, governance, and continuous improvement of vulnerability management processes

Hybrid work model: 6 days per month from the Kraków office