Backbase

The Job in shortKeep millions of users and their banking data safe and secure.
Meet the job
No day at backbase is the same, and even more so for our security engineers. We all know that security and banking need to go hand in hand and with hackers and tech evolving by the day, you’ll need to stay on your toes and ahead of the game.
Your core responsibility is to ensure the delivery of secure software. You are the go-to person for security, internally as well as for our clients. Leveraging your technical expertise and leadership, you drive the secure SDLC with its tools and processes. You ensure application security requirements are part of product development. You have expert understanding of application security and application security vulnerabilities and provide guidance to other team members. You provide architecture design reviews as well as source code reviews.You are responsible for Architectural Risk Analysis of the core products and lead the threat modeling activities. You provide training to developers and QA engineers on application security.
You research new tools and take the initiative in improving the ways of working. You play a key role in selecting candidates for the security team as well as onboarding and mentoring new hires.
How about you
Looking for a journey instead of a job? Then let’s talk! We are THE pioneers in banking tech. We see opportunities and take the leap. Having the guts to push limits and break barriers to make things happen. We learn and reinvent ourselves for maximum impact, never giving up. We are creators, with a customer-centric mindset that love what they do and bring fun to any challenge. Together we kick ass, have fun and feel proud when our vision is delivered. Next day - we wake up and raise the bar a little higher. Are you ready?
As a Principal Application Security Engineer you’ll take the lead in a team of security engineers working to ensure we build, maintain and deploy secure software that is used by millions of users around the globe. If you have a hacker mindset, are passionate about security and always looking to extend your knowledge, then this is the place for you. 
In order to really own this role, we think you’ll need:
<ul>
<li> Excellent understanding of application security and common application security vulnerabilities;</li>
<li> Excellent knowledge of the frontend, backend and mobile security domains;</li>
<li> Good understanding of DevOps and cloud native technologies;</li>
<li> Successful track record driving security initiatives;</li>
<li> A background in development and a good understanding of the SDLC;</li>
<li> English language on a professional level, written and spoken.</li>
</ul>

We’ll be delighted if you bring experience in the following topics but otherwise these would be opportunities for you to grow your knowledge working in the security team:
<ul>
<li> Implementing OWASP ASVS/M-ASVS and SKF;</li>
<li> Implementing SAST/SCA/IAST/RASP tools in the SDLC;</li>
<li> Assessing and implementing security maturity models;</li>
<li> Facilitating threat modeling sessions with the development teams;</li>
<li> Pen testing web and mobile applications;</li>
<li> Training and guiding developers on application security concepts;</li>
<li> Relevant regulations such as GDPR and PCI-DSS.</li>
</ul>

Krakow

Principal Application Security Engineer

OANDA

How would you feel about taking an active part securing a global leader in online multi-asset trading services, currency data, corporate payments and FX services?OANDA is looking for a versatile IT Security Analyst to help improve their overall security by joining the growing Security Team.This is a hands-on position: responding directly to the CISO, you’ll have the opportunity to suggest, evaluate, take ownership, implement, configure and maintain numerous security solutions; investigate security incidents, perform application security review, security assessments and other activities that can help improve OANDA’s security posture.
Do you know any other way to make our environment more secure?  At OANDA you'll have the opportunity to put it in practice.
In this position you will:
<ul>
<li>Help define Security processes and standards</li>
<li>Perform Security Assessments</li>
<li>Drive the Vulnerability Management process</li>
<li>Manage Endpoint Protection</li>
<li>Respond to security incidents and perform investigations</li>
<li>Spread Security Awareness across the company</li>
</ul>
Additionally, you may also be required to:
<ul>
<li>Find opportunities for automating security</li>
<li>Assist in audit and compliance activities</li>
<li>Participate in evaluation, implementation, configuration, improvement and troubleshooting of security tools/processes</li>
<li>Perform internal pen-tests</li>
<li>Drive the Vulnerability Disclosure Program</li>
</ul>
You fit this position if you have:
<ul>
<li>Excellent communication (English)</li>
<li>Deep knowledge in at least two Operating Systems (Windows, Linux or macOS)</li>
<li>Excellent understanding of network, web, authentication, cryptography and security protocols.  Including tools used to perform their analysis</li>
<li>Exposure to scripting languages (Bash, Python, PowerShell)</li>
<li>Good knowledge in general security principles and best practices; and how to leverage them in a global, financial and regulated environment</li>
</ul>
We also appreciate it if you have:
<ul>
<li>Experience in improving security of software development process</li>
<li>Working experience with compliance standards and frameworks such as CIS, NIST, PCI-DSS, GDPR, SOC2 and ISO27001</li>
<li>Certifications with emphasis on Information Security such as CIPP, CISSP, CompTIA Security+ and CRISC</li>
</ul>
OANDA Global Corporation is a diverse and global team with offices around the world. We value the unique skills and experiences each individual brings to OANDA. We are committed to creating and sustaining a collegial work environment in which all individuals are treated with dignity and respect and one which reflects the diversity of the community in which we operate. We provide an inclusive and accessible environment for everyone. Candidates selected for an interview will be contacted directly. If you require accommodation during the recruitment and selection process, please let us know. We will work with you to provide as seamless a recruitment experience as possible.

IT Security Analyst

The Job in shortAs a Senior Application Security Engineer you’ll work with development teams to ensure we build and maintain secure software that is used by millions of users around the globe. You have a hacker mindset and always strive to think like an attacker. You will be part of the Backbase Security Guild where we share knowledge and discuss security for many different domains.
Meet the jobYour core responsibility is to analyse the software from a security perspective, and to identify and resolve security issues. Your input helps to improve the secure SDLC with its tools and processes. You validate that application security requirements have been met. You have expert understanding of application security and application security vulnerabilities. You provide guidance and workshops to developers and QA engineers on secure coding, security testing and working with security tools. You perform security code reviews and suggest improvements to development teams.
You will work closely with the customer success development teams who customise and extend the Backbase product for our clients. You thrive working with colleagues from multiple cultures. You mentor new team members and act as the go-to person for security in your area.
How about you● You have 3+ years of experience in application security and 2 years working as a developer;● You hold a Bachelor's degree in Computer Science, Information Security, Cyber Security or equivalent;● You have professional command of English language, written and spoken;● Security certifications such as CSSLP, CISSP, GWEB are nice to have;● You have a deep understanding of application security;● You have expert understanding of security in the SDLC and SAST/SCA/DAST tools;● You have a good understanding of security code review (Java, Javascript, Kotlin or Swift);● You have a good understanding of frontend, backend and mobile security domains and you’re an expert in one of them;● You have a good understanding of pen testing web applications or mobile applications;● You are experienced on security verification of web applications or mobile apps using OWASP ASVS/M-ASVS and testing guides;● You have a deep understanding of DevOps and Agile product development;● You have a good understanding of relevant regulations such as GDPR and PCI-DSS;● You have a good understanding of cloud-native technologies such as Kubernetes.

Senior Application Security Engineer

Beekeeper

Have you ever wondered what tools frontline workers like hotel and hospitality employees use to work efficiently? Remember pinboards or paper processes? That is history!
Beekeeper’s platform is the beating heart for frontline businesses, as it combines all great features to make the frontline workforce successful and engaged.
We are transforming the way frontline businesses work. Do you want to join the mission?
As a Security Engineer at <a href="https://beekeeper.io" rel="noopener noreferrer nofollow ugc" target="_blank">Beekeeper</a> you will be responsible for ensuring that the software product we offer to our customers meets our security standards. The Beekeeper product offering is being used across the globe (in over 100 countries) by over 200 companies, who have entrusted us with their data.
Our teams follow modern development practices, such as continuous deployment, microservices, test-driven development, DevOps methodologies, etc. You will be responsible for further driving the security efforts in our operations and development. You'll work with other teams on increasing our security posture, leveraging when possible services from AWS and GCP. Maintaining the security of our infrastructure and applications, and implementing mitigation strategies when needed like WAF and DDoS protection. You’ll work closely with the DevOps team in their day to day operational tasks. 
Location: Krakow office or hybrid model or remote 
<h3>Your Responsibilities</h3>
<ul>
<li>Enhance and maintain the security of the platform</li>
<li>Implementing security features</li>
<li>Monitor security of the infrastructure and applications</li>
<li>Analyze security events and alerts and drive technical incident response activities</li>
<li>Implement mitigation strategies if needed</li>
<li>Implement new security tools and features (k8s, AWS, GCP)</li>
<li>Improve existing security related processes</li>
<li>"Work with the rest of the Engineering organization to increase the security of our software development lifecycle."</li>
<li>Prepare and execute technical security trainings</li>
<li>Assist with the whitehat training days and Blue/Red teams events</li>
</ul>
<h3>Our technology stack</h3>
We work with the latest technologies like k8s, Terraform, Envoy. Our engineering team uses Java, Python, and Go for developing products and infrastructure. We play a lot with AWS and GCP security solutions. We never stop looking for better solutions.
<h3>Projects you might work on</h3>
<ul>
<li>Monitoring and tuning our security monitoring solutions like WAF, k8s etc. </li>
<li>Creating new tools that will speed up that process.</li>
<li>Implementing new solutions for our infrastructure. </li>
<li>Working on a new VPN infrastructure with zero-trust architecture.</li>
<li>Implementing service mesh</li>
<li>Improving our API security </li>
<li>Implementing network policies in our k8s clusters.</li>
<li>Supporting engineering team with implementation of security features.</li>
</ul>
<h3>What we look for in you</h3>
<ul>
<li>Software Engineer who is passionate about security</li>
<li>Experience working with Web Application Firewalls (configuration, monitoring)</li>
<li>Experience working with the cloud environments (AWS and GCP)</li>
<li>Good understanding of cloud security solutions.</li>
<li>Experience with implementation of k8s network security policies.</li>
<li>Experience with service mesh solutions</li>
<li>Experience with k8s monitoring solutions (like eBPF, sysdig),</li>
<li>Ability to read and understand source code in Python, Java, Go</li>
<li>Good knowledge and understanding of security related topics</li>
<li>Fluent verbal and written English language skills.</li>
</ul>
<h3>Bonus Points</h3>
<ul>
<li>Working experience in a technology or SaaS company</li>
<li>Experience as an offensive security engineer or pentester</li>
<li>1+ year of DevOps experience</li>
<li>Good understanding of Terraform.</li>
<li>Eligibility to work in Poland</li>
</ul>
<h3>What we offer:</h3>
<ul>
<li>Attractive compensation and benefits</li>
<li>20 000 PLN sign-on bonus </li>
<li>Choose the cooperation you want: B2B or employment contract</li>
<li>Thriving engineering community where you will further develop your career </li>
<li>Opportunity to shape how we do security</li>
<li>Support in relocation or work permit process (within Europe)</li>
<li>Work from abroad (60 days a year)</li>
</ul>
<h3>Who we are</h3>
<a href="https://www.beekeeper.io/en" rel="noopener noreferrer nofollow ugc" target="_blank">Beekeeper</a> believes in the potential of every single employee. That’s why we’ve built the essential platform for frontline workers. We put all company communications and tools in one place, empowering frontline employees to be more agile, productive, and create a safer workplace. 
We are based in Zurich, Berlin, US and Krakow.  These locations support users in more than 130 countries. 
To check out Perks and Benefits, please see our<a href="https://www.beekeeper.io/en/content/careers-page-faq" rel="noopener noreferrer nofollow ugc" target="_blank"> FAQ page</a>.

Security Engineer (Poland)

The job in short
Working with the world’s fastest growing and multiple award winning SaaS Fintech in Engagement Banking, this is an exciting role that allows for career growth and development in the area of Compliance. You will play a pivotal part in developing this role and influencing a culture of Compliance across Backbase.
Based in Krakow, Poland, you will report directly to the Compliance Director and assume day-to-day management of a wide range of Compliance activities and implementation initiatives
 Meet the job
<ul>
<li> Work together with the Compliance team to identify, prioritize and roll-out key compliance &amp; risk initiatives;</li>
<li>Liaise with teams and business owners across the organisation ensuring initiatives are built into support functions as well as product &amp; tech roadmaps, managing key milestones;</li>
<li> Drive the Supplier Assurance programme; perform and/or monitor the performance of supplier assessments/third party due diligence;</li>
<li> Perform and/or monitor and follow-up on screening of customers, vendors and other third parties;</li>
<li> Advise and support the business functions and respond to ad-hoc compliance requests;</li>
<li> Further develop and maintain the Compliance training programme, coordinating with the Backbase Academy, track and monitor mandatory training to determine effectiveness.</li>
<li> Perform triage on reported Compliance concerns and follow-up or investigate;</li>
<li> Support customer assurance audits and RFP due diligence requests;</li>
<li> Contribute to setting up the Risk function in various departments</li>
<li> As a contributing member of the IT Security Committee, you will be involved in risk mitigation decisions and deliverables;</li>
<li> Maintain Compliance policies; Support the Compliance Director with the revision of the policy framework;</li>
<li> Work closely with Legal and Compliance team members on GDPR and other related topics and regulatory requirements;</li>
<li> Promote the effective use of tooling and of control frameworks to ensure that Compliance risks are appropriately managed.</li>
</ul>
How about you?
You are a passionate and agile individual that when faced with hard work can attack that work with a positive and energetic “Can Do” attitude. You are a curious person by nature and you are keen to understand the products and services of Backbase and the world it is operating in when performing your job. You can manage multiple initiatives concurrently,
You bring
<ul>
<li> 10 years of relevant working experience in the practical implementation of global Risk &amp; Compliance programmes, ideally in a software development and cloud computing organization;</li>
<li> Good working knowledge of global laws and regulations relating to Integrity &amp; Compliance risks including bribery, corruption, fraud, and sanctions as well as IT Security and data protection risks;</li>
<li> Knowledge of EU/US legislation &amp; regulation of the Financial Sector is a major plus;</li>
<li> An understanding of management in SOC2 or ISO27001 security framework implementation;</li>
<li> Good knowledge of GDPR and other privacy laws;</li>
<li> Strong and effective stakeholder management both internal and external to your organisation;</li>
<li> Excellent communication project management and organisational skills;</li>
<li> Knowledge and understanding is preferred on Agile/Scrum/LEAN/SDLC working methods;</li>
<li> Solid spoken and written command of the English language;</li>
<li> Professional certifications such as CIPP, CISA, CISSP, CRISC or other relevant certifications.</li>
</ul>
Backbase is the fastest-growing front-runner in Engagement Banking software and is experiencing explosive growth in high margin revenue, customer acquisition and headcount. To illustrate - headcount has grown from 50 to 2,050 people (1,000+ hired in the last 12 months), with offices worldwide and partnering with over 150+ global banks, transforming customer experience for 70+ million customers.
Backbase has bootstrapped itself into a profitable and debt free company, it recently (June 2022) took growth equity of $128m from a specialist US PE firm which resulted in a $2.6bn valuation
All revenue has gone back into growth. How many other companies or FinTechs can claim this? This is a clue to how different Backbase is. (2022)

Compliance Officer

Apply to Cyber Security Jobs in Krakow in companies remotely and near you. New Cyber Security Jobs in Krakow added daily.

Job Position and Company	Location	Tags	Posted
Principal Application Security Engineer at Backbase	Full Time Application Security
IT Security Analyst at OANDA	Full Time CISO Comptia Audit Analyst
Senior Application Security Engineer at Backbase	Full Time Javascript Application Security
Security Engineer (Poland) at Beekeeper	Agile AWS Cloud Devops GCP
Compliance Officer at Backbase	Agile Audits Banking CIPP CISA

Cyber Security Jobs in Krakow

0 Cyber Security Jobs in Krakow. Page 1 of 1

5 closed cyber security jobs in krakow:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in Krakow

0 Cyber Security Jobs in Krakow. Page 1 of 1

5 closed cyber security jobs in krakow:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter