Application Security Specialist

Security

Application Security Specialist

Security
-, Poland (Remote) +2 Locations

PayU S.A.

Full-time
Permanent
Mid
Hybrid

Job description

RESPONSIBILITIES


  • Implement and monitor security measures across applications, systems, and networks.

  • Define and refine security requirements in collaboration with development and infrastructure teams.

  • Configure, harden, and troubleshoot application and security components.

  • Build tools and solutions to detect, mitigate, and automate remediation of vulnerabilities.

  • Manage vulnerability assessments, penetration tests, and external bug bounty reports.

  • Champion secure coding practices throughout the SDLC through reviews, threat modeling, and security gates.

  • Integrate automated security checks into CI/CD pipelines with development teams.

  • Investigate and respond to security incidents, performing technical analysis and containment.

  • Assess overall security posture, identify gaps, and drive continuous improvement.

  • Deliver clear reports, dashboards, and executive summaries on risks, remediation progress, and trends.


QUALIFICATIONS AND EXPERIENCE


  • Minimum of a bachelor's degree in computer science, information systems, and/or equivalent formal training or professional experience.

  • Minimum of 3 years of experience in IT or information security.

  • Over 3 years of experience with security systems.

  • Detailed technical knowledge of database and operating system security.

  • Experience with SIEM and SOAR technologies.

  • Experience in network security and network technology, as well as familiarity with system, security, and network monitoring tools.

  • Knowledge of internet technologies (web applications, web services, service-oriented architectures) and network protocols.

  • Familiarity with cybersecurity standards frameworks such as ISO and NIST.

  • Experience with various cloud computing platforms and cloud security frameworks.

  • Experience in preparing reports and documentation based on independent findings.

  • Strong understanding of the OWASP Top 10 application security risks.

  • Practical experience with Java and PHP application security.

  • Knowledge of secure development and code review best practices for web applications.


BEHAVIOURAL COMPETENCIES


  • Problem-solving skills and ability to work under pressure.

  • Effective communication with IT and technical departments.

  • Strong analytical thinking.

  • Ability to work independently.


WHAT WE OFFER


  • Employment under a contract of employment.

  • Benefits: ability to develop one’s own package in MyBenefit system.

  • Access to an internal training platform.

  • Possibility to work in a hybrid model.

  • Friendly work atmosphere in a cooperation-driven team.

  • Work in an international organization operating in a rapidly changing industry.

Tech stack

    Application Security

    regular

    Information Security

    regular

    Cloud Computing

    regular

    SOAR

    regular

    SIEM

    regular

    Cloud security

    regular

    Network Protocols

    regular

    Cybersecurity

    regular

Office location