Senior Cyber Security Application Engineer

This is a fully remote position, open to applicants in Europe.

📋 Description

• Conduct comprehensive architecture and security assessments of both cloud and on-premises applications.

• Evaluate new and existing applications against established security requirements and organizational security standards.

• Define and ensure the implementation of security requirements across IaaS, PaaS, SaaS, and on-premises infrastructures.

• Regularly review and update security baselines in response to evolving threats, industry standards, and organizational demands.

• Assist architecture teams with threat modeling and risk assessment activities.

• Apply security controls and mitigations for identified vulnerabilities.

• Guide the implementation of key applications following secure-by-design principles.

• Establish security principles, policies, and governance frameworks.

• Develop and implement a secure development lifecycle framework and associated processes in collaboration with Governance, Risk, and Compliance teams.

• Integrate security throughout the product lifecycle, including discovery, threat modeling, design reviews, secure delivery, monitoring, and post-release testing.

• Identify and remediate security vulnerabilities using static and dynamic code analysis and security scanning techniques.

• Investigate security reports from the InfoSec team and trusted partners.

• Collaborate with the incident response team to address application security issues and incidents.

• Define the scope and supervise application penetration testing activities.

• Assess trade-offs between security measures and business requirements.

• Lead strategic security initiatives that enhance security across Colliers.

⛳️ Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field (or equivalent experience).

• 5–8+ years of experience in cloud applications, cybersecurity, or related areas.

• Extensive experience in threat modeling and conducting security reviews.

• Practical experience with whitebox, greybox, and blackbox assessments or oversight of application penetration tests focusing on OWASP standards.

• Strong documentation capabilities.

• Experience collaborating with various IT and non-IT teams across different disciplines.

• Ability to comprehend complex technical challenges and provide suitable security guidance that supports business objectives.

• Relevant certifications such as CISSP, CCSP, or equivalent are preferred.

• In-depth knowledge of zero trust, identity management, threat detection, threat modeling, and security best practices.

• Self-driven and skilled at resolving complex problems.

• Excellent communication and collaboration abilities.

• Capacity to quickly learn and apply new technologies in complex deployment environments.

• Proficiency in English.

🏝️ Benefits

• Remote work opportunity in Poland.

• Employment contract.

• Private healthcare, including rehabilitation services.

• An additional 6 days off per year for parents.

• Cafeteria program and other additional benefits.

• Internal training programs available.

• Work in an international environment, primarily in English.

• A company focused on sustainable development.

• Recognized as Best Employer in 2017 and 2019 by Kincentric (formerly AON).

• Title of Investor in Human Capital for 2019, 2021, 2022, 2023, 2024, and 2025.