ALTEN Polska

Security Remediation Engineer

Brak informacji o wynagrodzeniu

SeniorHybryda·KrakówFull-time·Umowa o pracę·B2B

#453060·Dodano miesiąc temu·0

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

Vulnerability Managementweb infrastructurePythonPowershellWAF Policies & Security ControlsSitecore or Enterprise CMS

Podsumowanie oferty

The role involves building, scaling, and maintaining the IKP infrastructure to ensure reliability, performance, and scalability. The Security Remediation Engineer will own vulnerability management across multiple layers including CDN, WAF, hosting, CMS, and applications. Key responsibilities include triaging findings, driving remediation, coordinating patching campaigns, and representing the platform in security governance.

Wymagania

6–8 years of senior hands-on engineering experience.
Experience in vulnerability management or security remediation at scale in production environments.
Working knowledge of web infrastructure, including CDN, WAF, TLS, DNS, HTTP security headers, and common web attack mitigations.
Cloud platform experience, preferably with Azure (patching, configuration baselines, identity, and network controls).
Ability to interpret, reproduce, and assess scanner findings within the architecture.
Familiarity with vulnerability scoring and prioritization frameworks.
Proven ability to drive work through non-direct reports using influence, clarity, and follow-through.
Strong written English and confidence working with stakeholders across multiple countries and time zones.
Experience with WAF policies and security controls.
Experience with Sitecore or comparable enterprise CMS.
Scripting and automation skills (Python, PowerShell, or similar) for tooling integration and reporting.
Familiarity with regulated financial services environments and operational resilience expectations.
Relevant certification (e.g., CISSP, OSCP, Azure Security Engineer Associate) or comparable practical expertise.

Obowiązki

Own the vulnerability position and maintain a consolidated view of all open findings across CDN, WAF, hosting, CMS, and application layers.
Triage incoming findings by validating, deduplicating, and assessing their exploitability, then assign priorities and remediation deadlines.
Challenge false positives and overstated severity ratings with evidence to focus engineering efforts on high-risk areas.
Drive remediation by translating findings into actionable tasks for platform, Akamai, Azure, and Sitecore engineers.
Collaborate with team leads to schedule remediation within sprints and change windows without disrupting ongoing projects.
Provide hands-on technical support for complex fixes, including WAF rule tuning, patching, dependency upgrades, and mitigation design.
Track remediation progress and verify that fixes resolve the findings rather than just suppressing symptoms.
Own the patching cadence and currency of the platform estate, including operating systems, runtimes, CMS, and third-party components.
Plan and coordinate patching campaigns across regions and maintenance windows.
Identify and reduce structural causes of recurring vulnerabilities, such as unsupported versions, unmanaged dependencies, and configuration drift.
Produce reports on vulnerability and patching status for leadership and risk functions.
Evidence remediation against internal security policy timescales and support audit and regulatory requests.
Represent the platform in security governance forums, remediation reviews, and risk acceptance discussions.
Escalate issues effectively when necessary.

Benefity

Full-time employment contract.
Location in Kraków with hybrid work model.
Stable and long-term cooperation.
Well-defined career path at the European leader in engineering & IT consulting.
Opportunity to relocate and work in different ALTEN Polska branches.
Opportunity to engage in subsequent projects within the company after project completion.
Introduction and cooperation with a dedicated Competences Manager.
Medicover medical, dental care, benefits platform, and sport card.
Referral Program.
Layette for a newborn employee's child.
Group life insurance.
Pension scheme.
Access to professional certifications with technology partners (e.g., Google, ISTQB).
Access to relevant industry events.
Access to the Knowledge Sharing Program.
Access to the Referral Program.
Cooperation based on B2B or Contract of mandate (UZ).

Opieka zdrowotna

Karta sportowa

Ubezpieczenie

Płatny urlop

Inne informacje

Klauzula informacyjna dotycząca przetwarzania Twoich danych osobowych jako potencjalnego pracownika i szczegółowe informacje prawne dotyczące przetwarzania danych osobowych zgodnie z przepisami RODO zawarte w ogłoszeniu.

ALTEN Polska

113 aktywnych ofert

Zobacz wszystkie oferty

Aplikuj teraz