DCG

Cybersecurity Specialist

Brak informacji o wynagrodzeniu

MidOn-site·WarszawaFull-time

#468999·Dodano 7 dni temu·4

Źródło: DCG

Aplikuj teraz

Tech Stack / Keywords

STRIDEAI agentsmachine learning LLMsOWASP Top 10 for LLM ApplicationsMITRE ATLAS

Podsumowanie oferty

Support threat modelling with application and platform teams, reviewing solution designs and mapping threats to security controls. Track threat mitigation and remediation, including assessments involving AI agents, machine learning systems and Large Language Models (LLMs).

Wymagania

Minimum 3 years of professional experience in cybersecurity, IT security, application security, or a related area
Knowledge of IT Security Architecture principles
Basic practical knowledge of threat modelling methodologies, particularly STRIDE
Understanding of cybersecurity threats related to AI agents, machine learning systems, and Large Language Models (LLMs)
Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse scenarios
Experience working with or maintaining existing threat models and threat libraries
Ability to map identified threats to relevant security controls and remediation actions
Fluency in English (both written and spoken)

Nice to have:

Ability to translate technical security threats into understandable business risks
Basic knowledge of the OWASP Top 10 for LLM Applications
Familiarity with MITRE ATLAS and its use as a reference framework for AI-related threat assessments

Obowiązki

Support threat modelling workshops with application and platform teams
Assist in identifying critical assets, trust boundaries, attack surfaces, threat actors, abuse cases, and security risks
Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries
Review solution designs, architecture documentation, and application data flows in cooperation with senior security specialists
Map relevant threat scenarios to application components, data flows, and predefined security controls
Document identified threats, risks, assumptions, mitigation actions, and remediation requirements
Cooperate with development and security teams to gather required information and support remediation activities
Track identified threats, mitigation actions, and remediation progress

Benefity

Private medical care
Co-financing for the sports card
Constant support of a dedicated consultant
Employee referral program

Opieka zdrowotna

Karta sportowa

DCG

453 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz