Application Security Engineer

4 dni temu


Kraków, Lesser Poland Trucker Path Pełny etat

All Jobs > Application Security Engineer

Moatable is a forward-thinking, user-focused SaaS company that is passionate about creating groundbreaking solutions and pushing the boundaries of what's possible. With a diverse and talented team, we foster a collaborative environment where creativity and out-of-the-box thinking thrive. Join us on our exciting journey and help shape the future of technology

Moatable operates several US-based SaaS businesses including Lofty and Trucker Path.

Trucker Path

This is North America's most popular suite of applications for commercial over-the-road truck drivers. It helps users discover hundreds of thousands of truck-friendly locations, navigate confidently with reliable turn-by-turn truck navigation, source loads from one of the largest mobile load boards, and manage all their operations with a TMS platform that incorporates the entire ecosystem of offerings.

Trucker Path's mission is to revolutionize the trucking and transportation industry, starting with the millions of truck drivers that represent this trillion-dollar industry. Featured in Forbes, TechCrunch, Wall Street Journal, and VentureBeat as one of the fastest-growing tech startups disrupting the freight industry, our technology provides over-the-road truck drivers with a safe, economical, and smart long-haul experience.

We're proud to be the number one trucking platform with over one million active drivers that rely on our services. Our goal is to improve the lives of truck drivers and the efficiency of the $1T transportation industry through technology.

We are looking for an Application Security Engineer to circumvent unintentional data loss, malicious cyber-attacks, or potential data theft that would negatively affect our company.

As an Application Security Engineer, you will need to spot potential problems and vulnerabilities before malevolent actors take actions to attack our information security system. You will be responsible for taking actions to ensure the data integrity, proper preservation, and completeness in the event of data breaches or attacks and attempts to retrieve as much data as possible to minimize financial loss and business disruption. You will work with employees in different departments to monitor network and system security, develop and optimise service infrastructures, and promptly identify, handle, and address any detected vulnerabilities.

Responsibilities:

  1. Writing automated vulnerability and attack detection and interception scripts using Python, Bash, or other scripting languages.
  2. Managing security incidents: identifying and responding to security breaches, viruses, mining, ransomware, and trojans effectively.
  3. Supporting development teams in designing secure solutions, setting up security-aware development processes, and advising on tooling and framework selection from a security perspective.
  4. Reviewing and auditing currently used tools and tech stack for security gaps.
  5. Setting up IDS/IPS intrusion detection systems.
  6. Writing scripts for WAF to intercept common attack behaviours.
  7. Setting up SIEM system, rule design, detection script design, and analysing attack behaviours.
  8. Daily security issues and vulnerability remediation on AWS cloud servers.
  9. Penetration testing related tasks, leading a team to conduct penetration tests on the IT infrastructure, systems, and networks of the company and its subsidiaries and driving vulnerability remediation.
  10. Guiding testers in general penetration testing work.
  11. Collecting and assessing the impact of the latest disclosed vulnerabilities on the internet and promptly fixing them.
  12. Conducting security drills, blue team-red team exercises, and security awareness training.
  13. Maintaining relevant documentation and evidence during compliance audits.
  14. Setting up high and low interaction honeypots to lure and capture attack behaviours.

Requirements:

  1. Familiar with common programming languages, at least able to understand C++, Java, Golang, and other commonly used web programming languages; proficient in Python and shell scripting.
  2. Master common security code practices, including but not limited to input validation, output encoding, secure transmission, and relevant experience.
  3. Master data processing solutions, able to detect intrusions, determine impact ranges, and identify vulnerabilities through keen data analysis.
  4. Familiar with penetration testing methods and processes, proficient in various penetration testing tools, such as web application vulnerability exploration and penetration testing, attacking and defending databases, operating systems, mobile terminals, etc.
  5. Master common static and dynamic scanning tools, penetration testing tools, able to quickly detect, confirm, and fix vulnerabilities, and understand common encryption methods.
  6. Have a certain understanding of information security concepts, theories, and methods; love challenges, and be willing to engage in the information security industry; Master ISO27001 and SOC2 related certification processes in the field of information security.
  7. Possess good professional ethics, as well as good oral and written communication skills.
  8. Strong problem-solving ability, able to work under pressure, communicate and provide feedback to all parties in a timely manner, and solve problems effectively.
  9. Strong security awareness, keen insights into security incidents, able to perceive and collect security intelligence, and provide analysis to the entire company.
#J-18808-Ljbffr

  • Kraków, Lesser Poland ABB Pełny etat

    Application/Product Security EngineerAt ABB, we are dedicated to addressing global challenges. Our core values: care, courage, curiosity, and collaboration - combined with a focus on diversity, inclusion, and equal opportunities - are key drivers in our aim to empower everyone to create sustainable solutions.Write the next chapter of your ABB story.This is a...


  • Kraków, Lesser Poland HSBC Service Delivery (Polska) Sp. z o.o. Pełny etat

    This role involves providing expert advice on cyber security to support the organization's overall security efforts. You will work closely with various teams to ensure that security processes, controls, standards and regulatory requirements are met.Responsibilities:Conduct comprehensive security assessments of custom mobile applications, widely understood...


  • Kraków, Lesser Poland TN Poland Pełny etat

    About UsTN Poland is passionate about building next-level application security that developers and security teams both love to use. Our company lives by its values:We are passionate about excellenceWe see the world from the customer's perspectiveWe are better togetherWe are looking for a highly motivated, talented, and hands-on Algorithms Software Engineer...


  • Kraków, Lesser Poland TN Poland Pełny etat

    Job Title: Senior Product Security EngineerAbout the RoleThe Product Security organization at Zendesk builds and maintains tooling to detect and prevent vulnerabilities, safeguarding Zendesk's customers, products, and services. We partner with our engineers to prioritize security during the entire software development process and provide tools and programs...


  • Kraków, Lesser Poland TN Poland Pełny etat

    Social networks require user authentication before access:A highly skilled Cyber and Information Security Engineer III supports the information security and systems teams through managing information security technologies and addressing support requests. The engineer collaborates with multiple technologies to implement, monitor, and maintain solutions that...


  • Kraków, Lesser Poland TN Poland Pełny etat

    Security Engineer Job DescriptionAs a Security Engineer, you will join the Security Assurance Team and be responsible for network security standards, governance, and best practices.Job ResponsibilitiesReview requests for firewall rules, ensuring they align with existing policy and standards. This includes approval, monitoring, and control of requests.Verify...


  • Kraków, Lesser Poland TN Poland Pełny etat

    Social network you want to login/join with:A Senior Cyber and Information Security Engineer III provides intermediate support to the information security and information systems teams through managing information security technologies and responding to requests for support. An Information Security Engineer works with multiple technologies to implement,...


  • Kraków, Lesser Poland GlobalLogic Pełny etat

    About the Position: As a Lead Web Application Engineer at GlobalLogic, you will lead the development of high-quality web applications that drive business growth and customer satisfaction. We are seeking an experienced engineer to join our team and help us deliver innovative solutions.Key Responsibilities:Develop new user-facing features, optimize the...

  • Senior Security Engineer

    4 tygodni temu


    Kraków, Lesser Poland Nortal Pełny etat

    OverviewPwrteams are seeking a Senior Security Engineer to join the Security Platform team, which owns and maintains a unified and overarching CDN & WAF capability at TUI for our digital services. You will be working alongside the Security Practice team which provides solutions, consultancy, education and guidance across the Product & Engagement area. The...


  • Kraków, Lesser Poland Brown Brothers Harriman & Co. Pełny etat

    We are looking for an Enterprise Application Engineer to join our Infomediary Data Solutions team at Brown Brothers Harriman.Job Description:The Enterprise Application Engineer will design, develop, test, and deploy software applications in the Financial Technology area.Key Responsibilities:Design and develop software applications using a variety of...


  • Kraków, Lesser Poland Tomasz Rutkowski Solo Law Firm Pełny etat

    As a Cloud Security Engineer Leader at Tomasz Rutkowski Solo Law Firm, you will be responsible for leading the implementation and maintenance of our Microsoft Sentinel SIEM solution in a hybrid on-premises and cloud network configuration.The ideal candidate will have:Extensive experience with log source configuration, parsing, and building data collection...


  • Kraków, Lesser Poland Tomasz Rutkowski Solo Law Firm Pełny etat

    For one of our Clients we are currently looking for experienced Senior Cyber Security Engineer who will be responsible for:Primary support and oversight of a Microsoft Sentinel SIEM, including deployments into segregated networks and periodic technology upgrades.Support company's Enterprise SIEM in a hybrid on-premises and cloud network configuration,...


  • Kraków, Lesser Poland TN Poland Pełny etat

    Security measures need strict adherence to protocols:A Senior Cyber and Information Security Engineer III supports the information security and systems teams through managing information security technologies and addressing support requests. The engineer works with multiple technologies to implement, monitor, and maintain solutions that meet Westinghouse's...

  • Senior Security Engineer

    4 tygodni temu


    Kraków, Lesser Poland Relativity Poland sp. z o.o. Pełny etat

    Senior Security Engineer - Vulnerability ManagementSenior Security Engineer - Vulnerability ManagementApply remote type Security locations Kraków Katowice Bydgoszcz Bialystok Wroclaw time type Full time posted on Posted 4 Days Ago job requisition id 25-0104Posting Type: RemoteJob Overview:As a Senior Security Engineer on the Vulnerability Management team at...

  • Senior Security Engineer

    4 tygodni temu


    Kraków, Lesser Poland OANDA Pełny etat

    OANDALearn why OANDA has been a leading broker for over 25 years.Everyone at OANDA is focused on our vision to transform how our customers can meet all their currency needs. We are revolutionising the world of currency trading by providing innovative trading experiences, currency data and analytics solutions. Dare to be open, bold, focused - own it and apply...


  • Kraków, Lesser Poland Awake Security Pełny etat

    Full-timeCompany DescriptionArista Networks is an industry leader in data-driven, client-to-cloud networking for large data center, campus and routing environments. What sets us apart is our relentless pursuit of innovation. We leverage the latest advancements in cloud computing, artificial intelligence, and software-defined networking to provide our clients...


  • Kraków, Lesser Poland INFOGAIN TECHNOLOGIES SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ Pełny etat

    technologies-expected : Jira Confluence Linux SolarWinds Zabbix Datadog technologies-optional : CentOS Ubuntu Red Hat about-project : As a member of the Enterprise Technical Services team, an Enterprise Application Support Engineer will play a critical role in ensuring the stability, performance, and optimal functionality of our enterprise-level...


  • Kraków, Lesser Poland Awake Security Pełny etat

    About the JobAwake Security is seeking a highly skilled Software Development Engineer to join our team. As a key member of our development team, you will be responsible for building and implementing software tools and Machine Learning models.The ideal candidate will have a strong background in programming languages such as C/C++, Golang, and Python....

  • Cloud Network Engineer

    1 dzień temu


    Kraków, Lesser Poland Awake Security Pełny etat

    About the JobAwake Security is seeking a highly skilled Cloud Network Engineer to join our team. As a key member of our development team, you will be responsible for building and implementing software tools and Machine Learning models.The ideal candidate will have a strong background in programming languages such as C/C++, Golang, and Python. Experience with...


  • Kraków, Lesser Poland KPMG Pełny etat

    Our Tax Technology team deals with creating and implementing advanced IT solutions that support wide range of business and tax calculation processes. They are related mainly to international personal income taxes (GMS – Global Mobility Services) and management of human resources. We work in global and diverse environment and cooperate with various teams...