Mid Cybersecurity Engineer - eBilet w Warszawa, Polska

Your responsibilities

• Act as the dedicated security engineer for eBilet, taking ownership of its day-to-day security work in close cooperation with eBilet teams and Group Security.
• Turn Group Security policies, standards and requirements into practical controls, processes and priorities for eBilet.
• Assess eBilet’s security risks and maintain a roadmap of improvements, taking into account business needs, technical changes, incidents and assessment findings.
• Build security into the software development lifecycle by introducing practices such as threat modelling, security requirements, design reviews and secure development guidance.
• Drive security hardening across applications, infrastructure and cloud environments, including access management, secure configuration, patching, secrets and logging.
• Manage vulnerabilities and security findings from identification through prioritization, remediation and verification.
• Perform hands-on security reviews and technical testing, and coordinate external assessments when needed.
• Work with engineering and product teams to design and implement security controls that reduce risk without creating unnecessary friction.
• Support incident response with Group Security, help identify lessons learned and follow through on resulting improvements.
• Track security work and report on key risks, findings and progress to eBilet and Group Security stakeholders.

Our requirements

What we offer