Information Security Engineer (AppSec / Cloud Security)

22.5k - 30.5k PLN22 500 - 30 500 PLN/ mies./ mies.B2BB2B (netto)

SeniorOn-site·WarszawaFull-time·B2B

#473521·Dodano wczoraj·1

Źródło: justjoin.it

Aplikuj teraz

Tech Stack / Keywords

TLSAppSecOWASP TypeScript Node.js Kubernetes Google Cloud PlatformPCI DSS

Podsumowanie oferty

Be the first dedicated security specialist for a live fintech platform combining crypto and fiat services, wallets, exchanges and payment cards. Lead security across the product, from source code to cloud infrastructure, including AppSec, Cloud Security, Kubernetes and Google Cloud.

Wymagania

3+ years of experience in AppSec or Cloud Security, preferably in fintech.
Hands-on experience with AI tools such as Claude Code or Cursor for code and configuration analysis and automating checks; understanding of security risks from using AI agents in development.
Knowledge of OWASP ASVS and OWASP Top 10, and experience with threat modeling and code review in TypeScript and Node.js.
Experience securing Kubernetes and cloud platforms such as GCP or AWS.
Experience with PCI DSS audits or systems within PCI DSS scope.
Applied cryptography knowledge, including TLS, AES-GCM, RSA-OAEP, HMAC and key management.
English sufficient to read technical documentation.

Nice to have:

Blockchain and custody experience, including MPC, transaction-signing policies and smart contract audits.
Mobile application security experience (iOS, Android).
Certifications: OSCP, OSWE, CISSP, PCI ISA or QSA.
Knowledge of AML/KYC and anti-fraud processes.

Obowiązki

Conduct threat modeling, architecture and source code reviews, and organize internal and external penetration tests.
Define the PCI DSS scope and segmentation, and prepare for audits.
Define transaction-signing policies and manage key and wallet access for custody security.
Manage software supply chain security, including dependency control, image scanning and signing, and cluster admission policies.
Secure cloud and Kubernetes environments, including IAM, network and service mesh policies, secrets management, auditing and logging.
Secure the mobile app through certificate pinning, device integrity checks and secure storage of secrets.
Prevent fraud and account takeovers, and investigate security incidents.
Prepare for PCI DSS, ISO 27001 or SOC 2 audits; develop security policies and procedures, and train staff.

Benefity

Work on a product that is live in production, with real customers and real money movements.
Work with TypeScript, Node.js, microservices, Kubernetes, GitOps and infrastructure as code.
Direct influence on product and architecture decisions in a compact team.
AI tools are part of the everyday development, code review and testing workflow.

IPAYAPP s.r.o

2 aktywne oferty

Zobacz wszystkie oferty

Aplikuj teraz