Vulnerability & Application Security Engineer
Ernst and Young25 days ago
Wrocław, PolandMid Level / Senior
Responsibilities
- Prepare detailed security review reports and remediation guidance.
- Research new application security vulnerabilities and attack vectors.
- Conduct manual and automated security testing across web, thick-client, mobile, VOIP, wireless, and AI-integrated applications.
- Perform manual code reviews and assess secure coding practices and common coding vulnerabilities.
- Configure, manage, and update vulnerability assessment tools to ensure accurate and optimal results.
- Support security reviews, vulnerability assessments, penetration testing, audits, assessments, and security certifications.
- Lead strategic initiatives, mentor new team members, and contribute to continuous service improvement.
Requirements
- 1 to 6 years of experience in application security assessment.
- Hands-on experience with web, thick-client, and mobile application security reviews and testing methodologies.
- Proficiency with manual testing tools including Burp Professional, Nmap, Wireshark, Nessus, and echomirage.
- Experience with automated application scanning tools such as WebInspect, Qualys WAS, Checkmarx, and WhiteSource.
- Basic knowledge of C/C++, C#, Java, ASP.NET, Perl, and Python scripting.
- Understanding of secure coding principles, OWASP Top Ten vulnerabilities, application architecture, network security, TCP/IP, firewalls, IDS/IPS, and encryption.
- Experience testing Android and iOS applications and AI-integrated projects.
- Strong technical aptitude, problem-solving ability, communication skills, multitasking ability, and prioritization skills.
- A bachelor's degree or higher in Information Technology, Cyber Security, or a related field is ideally preferred.
- Interest in pursuing Information Security certifications such as CEH, OSCP, CISSP, CISM, or CISA.
Benefits
- Hybrid work arrangement in Wrocław or Katowice with 2 days in the office and 3 days remote.
- Continuous learning, coaching, and opportunities to develop new skills and insights.
- Work with global EY teams and well-known brands across multiple geographies and service lines.
- Diverse and inclusive culture with flexibility to make a meaningful impact.