22 days ago
Kraków, PolandSenior
Responsibilities
- Assess software architectures and designs for security vulnerabilities and recommend or implement alternatives.
- Oversee management and remediation of identified security flaws within development platforms.
- Build and maintain monitoring, auditing, and reporting frameworks supporting security and compliance needs.
- Drive vulnerability assessment and penetration testing activities for multiple R&D applications.
- Implement DevSecOps practices across the product line.
- Integrate SAST and DAST platforms into CI/CD pipelines.
Requirements
- At least 8 years of experience in software application penetration testing.
- Knowledge of DevSecOps, NIST, OWASP, MITRE, and CWE.
- Understanding of C#, Perl, JavaScript, Python, and/or PHP.
- Understanding of TCP/IP, networking ports and protocols, and the OSI model.
- Knowledge of threat modeling and risk assessment techniques.
- Current knowledge of cybersecurity threats and security best practices.
- Familiarity with HP Fortify, Puppet, Chef, ThreatModeler, Checkmarx, Aqua, Kubernetes, Docker, NESSUS, NMap, BurpSuite, ZAP, OWASP tools, Kali Linux tools, and fuzzing tools.
- Significant knowledge of security practices for client-server architectures, especially cloud-based server development.
- Knowledge of one or more SSO methodologies, including SAML, LDAP, and OpenID.
- Experience extracting security data from SIEM solutions and AWS audit logs and reports.
- Deep product knowledge sufficient to assess privacy and security risks involving clinical functionality, operating environments, and interoperability.
- Bachelor of Technology or Master of Technology degree in Computer Science, Information Technology, Electrical Engineering, Electronics and Communication, or Electronics and Instrumentation.
- CEH or OSCP certification is preferred.
- Successful applicants must pass a comprehensive background check before starting employment.
Benefits
- Full-time employment in Krakow, Poland.
- Inclusive equal-opportunity workplace and diverse work environment.
- Comprehensive background checks are conducted in accordance with local laws.
Tech Stack
Categories
About AVEVA
AVEVA builds industrial engineering, operations, and data-management software used by energy, process, infrastructure, and manufacturing companies. Its portfolio spans 3D design and simulation, HMI/SCADA and MES, asset performance, and the PI System for real‑time operational data, sold via enterprise licenses and cloud subscriptions. The company is headquartered in Cambridge, UK, and is a subsidiary of Schneider Electric following its 2023 acquisition and LSE delisting.