Responsibilities
- Own eBilet’s day-to-day security work in partnership with eBilet teams and Group Security.
- Translate security policies, standards, and requirements into practical controls, processes, and priorities.
- Assess security risks, maintain an improvement roadmap, and report risks, findings, and progress to stakeholders.
- Build security into the software development lifecycle through threat modeling, security requirements, design reviews, and secure development guidance.
- Drive security hardening across applications, infrastructure, and cloud environments, including access management, secure configuration, patching, secrets, and logging.
- Manage vulnerabilities and security findings through prioritization, remediation, and verification.
- Perform hands-on security reviews and technical testing and coordinate external assessments when needed.
- Support incident response, identify lessons learned, and follow through on resulting improvements.
- Use automation and AI to improve security effectiveness and address risks introduced by AI technologies.
Requirements
- Practical experience in application, infrastructure, or Azure cloud security and an understanding of how these areas connect.
- Experience integrating security into the software development lifecycle through threat modeling, security requirements, design reviews, or secure development practices.
- Ability to assess technical risks, prioritize vulnerabilities, and work with engineering teams on remediation.
- Experience with security testing, application or infrastructure testing, code reviews, or penetration tests.
- Knowledge of security hardening across Windows, Linux, and cloud environments, including access controls, secure configuration, patching, secrets management, and logging.
- Ability to turn security standards and policies into practical business and technology controls.
- Experience using AI and automation to improve security processes and designing controls to prevent, detect, and respond to AI-related risks.
- Clear communication skills and the ability to explain security issues to technical and non-technical colleagues.
- English proficiency at B2 level or higher.
- Ability to take initiative and own security work from identifying a need through implementation and validation.
Benefits
- Flexible working hours in a hybrid 4/1 model, with start times between 7:00 a.m. and 9:00 a.m., plus 30 days of occasional remote work.
- Work location in Warsaw or Poznań.
- Annual performance- and company-results-based bonus.
- MacBook Pro or Dell computer with Windows and necessary accessories.
- Cafeteria-plan benefits such as medical, sports, lunch, insurance, and purchase-voucher packages.
- Employer-paid English classes related to the role.
- Training budget, hackathons, inter-team tourism, and access to an internal learning platform.
- Additional volunteering day off and company social events.
- Well-equipped offices with kitchens, bicycle parking, terraces, ergonomic furniture, and modern conference rooms.
About Allegro
Allegro is the most popular shopping platform in Poland and the largest e-commerce platform of European origin. We operate a marketplace model which means that customers can buy whatever they need from over 135,000 merchants, who can list an unlimited number of offers on our platform. We offer products in all key categories including Automotive, Fashion, Home&Garden, Electronics, Books and Collectibles, Kids or Health and Beauty. Each month, 22 million customers visit our platform, which is equivalent to almost 80% of all Internet users in Poland. They can choose from over 250m offers at the most attractive prices with maximum convenience including fast and free deliveries under the Allegro Smart! programme, modern financial services (Allegro Pay), as well as Poland’s widest 50k pickup points network. In 2019 we celebrated the 20th anniversary of Allegro in Poland. For over two decades, we have been serving consumers and promoting the idea of entrepreneurship in one of the most innovative areas of the economy. We have come a long way from an auction site for private individuals looking for a modern alternative to their local flea market. Today, we are a vibrant international marketplace platform for professional sellers and a must-have sales channel for top international brands and retailers. We currently employ more than 7000 employees and each of us ranks among the best experts in their field. Whether it’s in Technology, Customer Experience, Commerce, Delivery Experience or many other teams, we’re all proud to say that Allegro employs the best people on the market and all of us are ready to admit that it’s #goodtobehere. ESG Report 2022: https://allegro.pl/zobacz/esg Career at Allegro: https://jobs.allegro.eu/ Allegro Tech: https://allegro.tech/ Brand Journal: magazyn.allegro.pl Support & help: pomoc.allegro.pl // facebook.com/allegro