Security Remediation Engineer

WHO ARE WE?

WE ARE A WORLD LEADER IN ENGINEERING AND IT SERVICES.

At ALTEN, we see our specialists as architects – today’s designers of tomorrow’s world.

As a leader in Engineering and IT Services, we support a company in their technological and sustainable transformation.

OVER 57,400 EMPLOYEES IN 30+ COUNTRIES, TO SUPPORT MORE THAN 6,500 CLIENTS WORLDWIDE.

We operate in all sectors: Aeronautics, Space, Defence, Security & Naval, Automotive, Rail & Mobility, Energy & Environment, Life Sciences & Health, Industrial Equipment & Electronics, Telecoms, Banking, Finance & Insurance, Retail, Services & Medias, Public Services & Government.

We carry out complex and highly technical projects throughout the value chain of the most prestigious companies worldwide.

Our motto: Building Tomorrow’s World Today!

This role focuses on building, scaling, and maintaining the IKP infrastructure to ensure reliability, performance, and scalability for internal customers worldwide.

Role description

• Own the vulnerability position and maintain a consolidated view of all open findings across CDN, WAF, hosting, CMS, and application layers.

• Triage incoming findings by validating, deduplicating, and assessing their exploitability, then assign priorities and remediation deadlines.

• Challenge false positives and overstated severity ratings with evidence to focus engineering efforts on high-risk areas.

• Drive remediation by translating findings into actionable tasks for platform, Akamai, Azure, and Sitecore engineers.

• Collaborate with team leads to schedule remediation within sprints and change windows without disrupting ongoing projects.

• Provide hands-on technical support for complex fixes, including WAF rule tuning, patching, dependency upgrades, and mitigation design.

• Track remediation progress and verify that fixes resolve the findings rather than just suppressing symptoms.

• Own the patching cadence and currency of the platform estate, including operating systems, runtimes, CMS, and third-party components.

• Plan and coordinate patching campaigns across regions and maintenance windows.

• Identify and reduce structural causes of recurring vulnerabilities, such as unsupported versions, unmanaged dependencies, and configuration drift.

• Produce reports on vulnerability and patching status for leadership and risk functions.

• Evidence remediation against internal security policy timescales and support audit and regulatory requests.

• Represent the platform in security governance forums, remediation reviews, and risk acceptance discussions.

• Escalate issues effectively when necessary.

Requirements

• 6–8 years of senior hands-on engineering experience (technical credibility with engineers is essential).

• Experience in vulnerability management or security remediation at scale in production environments.

• Working knowledge of web infrastructure, including CDN, WAF, TLS, DNS, HTTP security headers, and common web attack mitigations.

• Cloud platform experience, preferably with Azure (patching, configuration baselines, identity, and network controls).

• Ability to interpret, reproduce, and assess scanner findings within the architecture, not just relying on tool ratings.

• Familiarity with vulnerability scoring and prioritization frameworks and ability to articulate risk clearly for non-specialists.

• Proven ability to drive work through non-direct reports using influence, clarity, and follow-through.

• Strong written English and confidence working with stakeholders across multiple countries and time zones.

• Experience with WAF policies and security controls.

• Experience with Sitecore or comparable enterprise CMS.

• Scripting and automation skills (Python, PowerShell, or similar) for tooling integration and reporting.

• Familiarity with regulated financial services environments and operational resilience expectations.

• Relevant certification (e.g., CISSP, OSCP, Azure Security Engineer Associate) or comparable practical expertise.

We offer:

• We offer a full-time employment contract

• Location - Kraków, work model - hybrid

• Stable and long-term cooperation

• Well-defined career path at the European leader in engineering & IT consulting

• Opportunity to relocate and work in different ALTEN Polska branches

• After project completion, opportunity to engage in subsequent projects within the company

• Introduction and cooperation with a dedicated Competences Manager

Benefits:

• Medicover medical care

• Medicover dental care

• Medicover Benefits platform

• Medicover Sport card

• Referral Program

• Layette for a newborn employee’s child

• Group life insurance

• Pension scheme

We also offer cooperation based on a B2B or Contract of mandate (UZ).

We also guarantee:

• Access to professional certifications with our technology partners (e.g., Google, ISTQB)

• Access to relevant industry events

• Access to the Knowledge Sharing Program

• Access to the Referral Program

Do not hesitate and join our team!

NOTICE: We kindly inform you that we will contact the selected people.