Responsibilities
- Own eBilet’s day-to-day security work in cooperation with eBilet teams and Group Security.
- Translate Group Security policies, standards, and requirements into practical controls, processes, and priorities.
- Assess security risks and maintain a roadmap of improvements based on business needs, technical changes, incidents, and assessment findings.
- Embed security into the software development lifecycle through threat modeling, security requirements, design reviews, and secure development guidance.
- Drive security hardening across applications, infrastructure, and cloud environments, including access management, secure configuration, patching, secrets management, and logging.
- Manage vulnerabilities and security findings from identification and prioritization through remediation and verification.
- Perform hands-on security reviews and technical testing and coordinate external assessments when needed.
- Design and implement security controls with engineering and product teams.
- Support incident response, identify lessons learned, and track resulting improvements.
- Report key risks, findings, and progress to eBilet and Group Security stakeholders.
- Use AI and automation to improve security processes and design controls for risks introduced by AI technologies.
Requirements
- Practical experience with application, infrastructure, or cloud security, including Azure.
- Knowledge of integrating security into the software development lifecycle through threat modeling, security requirements, design reviews, and secure development practices.
- Ability to assess technical risks, prioritize vulnerabilities, and work with engineering teams on remediation.
- Experience with application or infrastructure security testing, code reviews, or penetration testing.
- Knowledge of security hardening for Windows, Linux, and cloud environments, including access controls, secure configuration, patching, secrets management, and logging.
- Ability to turn security standards and policies into practical business and technology controls.
- Experience using AI and automation to improve security work and understanding of AI-related security risks and controls.
- Strong ownership, initiative, communication, and collaboration skills with technical and non-technical stakeholders.
- English proficiency at least at B2 level.
Benefits
- Hybrid 4/1 work model with flexible start times between 7:00 a.m. and 9:00 a.m., plus 30 days of occasional remote work.
- Annual performance and company-results bonus.
- Work locations in Warsaw and Poznań.
- Well-equipped offices and modern work tools, including ergonomic furniture and interactive conference rooms.
- Choice of a 16-inch or 14-inch MacBook Pro or an equivalent Dell computer with Windows, plus accessories.
- Cafeteria-plan benefits such as medical, sports, lunch, insurance, and purchase-voucher packages.
- Employer-paid English classes related to the job.
- Training budget, hackathons, inter-team tourism, and access to an internal learning platform.
- Additional volunteering day off and company social events.
About Allegro
Allegro is the most popular shopping platform in Poland and the largest e-commerce platform of European origin. We operate a marketplace model which means that customers can buy whatever they need from over 135,000 merchants, who can list an unlimited number of offers on our platform. We offer products in all key categories including Automotive, Fashion, Home&Garden, Electronics, Books and Collectibles, Kids or Health and Beauty. Each month, 22 million customers visit our platform, which is equivalent to almost 80% of all Internet users in Poland. They can choose from over 250m offers at the most attractive prices with maximum convenience including fast and free deliveries under the Allegro Smart! programme, modern financial services (Allegro Pay), as well as Poland’s widest 50k pickup points network. In 2019 we celebrated the 20th anniversary of Allegro in Poland. For over two decades, we have been serving consumers and promoting the idea of entrepreneurship in one of the most innovative areas of the economy. We have come a long way from an auction site for private individuals looking for a modern alternative to their local flea market. Today, we are a vibrant international marketplace platform for professional sellers and a must-have sales channel for top international brands and retailers. We currently employ more than 7000 employees and each of us ranks among the best experts in their field. Whether it’s in Technology, Customer Experience, Commerce, Delivery Experience or many other teams, we’re all proud to say that Allegro employs the best people on the market and all of us are ready to admit that it’s #goodtobehere. ESG Report 2022: https://allegro.pl/zobacz/esg Career at Allegro: https://jobs.allegro.eu/ Allegro Tech: https://allegro.tech/ Brand Journal: magazyn.allegro.pl Support & help: pomoc.allegro.pl // facebook.com/allegro