Act as the dedicated security engineer for eBilet, taking ownership of its day-to-day security work in close cooperation with eBilet teams and Group Security.
Turn Group Security policies, standards and requirements into practical controls, processes and priorities for eBilet.
Assess eBilet’s security risks and maintain a roadmap of improvements, taking into account business needs, technical changes, incidents and assessment findings.
Build security into the software development lifecycle by introducing practices such as threat modelling, security requirements, design reviews and secure development guidance.
Drive security hardening across applications, infrastructure and cloud environments, including access management, secure configuration, patching, secrets and logging.
Manage vulnerabilities and security findings from identification through prioritization, remediation and verification.
Perform hands-on security reviews and technical testing, and coordinate external assessments when needed.
Work with engineering and product teams to design and implement security controls that reduce risk without creating unnecessary friction.
Support incident response with Group Security, help identify lessons learned and follow through on resulting improvements.
Track security work and report on key risks, findings and progress to eBilet and Group Security stakeholders.
Our requirements
You take initiative and can own security work from identifying a need to implementing a solution and checking that it works.
You have practical experience in application, infrastructure or cloud security (Azure) and understand how these areas connect.
You know how to build security into the software development lifecycle, for example through threat modelling, security requirements, design reviews and secure development practices.
You can assess technical risks, prioritize vulnerabilities and work with engineering teams to get findings fixed.
You have experience with security testing, such as application or infrastructure testing, code reviews or penetration tests.
You understand security hardening (Windows/Linux/cloud), including access controls, secure configuration, patching, secrets management and logging.
You can turn security standards and policies into practical controls that work for a business and its technology teams.
You communicate clearly, build good working relationships and can explain security issues to both technical and non-technical colleagues.
You use AI and automation to make security work and processes more efficient, understand the risks introduced by AI technologies, and design practical controls to prevent, detect and respond to them.
You know English at at least B2 level.
What we offer
Well-located offices (with e.g. fully equipped kitchens, bicycle parking, terraces full of greenery) and excellent work tools (e.g., raised desks, ergonomic chairs, interactive conference rooms).
A 16" or 14" MacBook Pro or corresponding Dell with Windows (if you don't like Macs) and all the necessary accessories.
A wide selection of fringe benefits in a cafeteria plan - you choose what you like (e.g., medical, sports or lunch packages, insurance, purchase vouchers).
English classes that we pay for related to the specific nature of your job.
A training budget, inter-team tourism (see more here), hackathons, and an internal learning platform where you will find multiple trainings.
An additional day off for volunteering, which you can use alone, with a team, or with a larger group of people connected by a common goal.
Social events for Allegro people - Spin Kilometers, Family Day, Fat Thursday, Advent of Code, and many other occasions we enjoy.