Vulnerability & Application Security Engineer
Ernst and Young14 days ago
Wrocław, PolandMid Level / Senior
Responsibilities
- Prepare detailed security review reports and remediation guidance.
- Research application security vulnerabilities and attack vectors.
- Conduct manual and automated security testing across web, thick-client, mobile, VoIP, wireless, Android, iOS, and AI-integrated applications.
- Configure, manage, and update vulnerability assessment tools to ensure accurate and optimal operation.
- Perform manual code reviews and assess secure coding practices and common vulnerabilities.
- Support penetration testing, security audits, compliance reviews, and third-party security attestations.
- Lead strategic initiatives, mentor new team members, and contribute to continuous service improvement.
Requirements
- Require 1 to 6 years of experience in application security assessment.
- Require hands-on experience with web, thick-client, and mobile application security reviews and application testing methodologies.
- Require proficiency with manual and automated testing tools, including Burp Professional, Nmap, Wireshark, Nessus, Echo Mirage, WebInspect, Qualys WAS, Checkmarx, and WhiteSource.
- Require basic knowledge of C/C++, C#, Java, ASP.NET, Perl, and Python scripting.
- Require understanding of secure coding principles, OWASP Top Ten vulnerabilities, application architecture, TCP/IP, network security, firewalls, IDS/IPS, and encryption.
- Require hands-on experience testing Android and iOS applications and AI-integrated projects.
- Require strong technical aptitude, problem-solving ability, communication skills, and the ability to prioritize multiple duties.
- Prefer a bachelor's degree or higher in information technology, cybersecurity, or a related field.
- Prefer or encourage relevant information security certifications such as CEH, OSCP, CISSP, CISM, and CISA.
Benefits
- Hybrid work arrangement in Wrocław or Katowice with two days in the office and three days remote.
- Continuous learning, coaching, and opportunities to develop skills and leadership capabilities.
- Work with global EY teams, international clients, and projects across multiple service lines and locations.
- Inclusive culture with flexibility and support to make a meaningful impact.
About Ernst and Young
Ernst & Young (EY) provides audit/assurance, tax, consulting, strategy and transactions services to enterprises, financial institutions, and public‑sector clients. Structured as a global network of partner‑owned member firms, it sells professional services on a fee basis, including a dedicated Financial Services Organization for banking, insurance, and capital markets. Headquartered in London, EY was formed in 1989 from the merger of Ernst & Whinney and Arthur Young, and operates in 150+ countries.