
DCG · Warszawa, Gdańsk, Gdynia
Cybersecurity Specialist
W skrócie
zdania wybrane z oferty- Minimum 3 years of professional experience in cybersecurity, IT security, application security, or a related area
- Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries
- Support threat modelling workshops with application and platform teams
Technologie
Pełny opis
z justjoin.itAs a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:
Cybersecurity Specialist
Responsibilities:
Support threat modelling workshops with application and platform teams
Assist in identifying critical assets, trust boundaries, attack surfaces, threat actors, abuse cases, and security risks
Create, maintain, and update threat models using approved methodologies, tools, templates, and threat libraries
Review solution designs, architecture documentation, and application data flows in cooperation with senior security specialists
Map relevant threat scenarios to application components, data flows, and predefined security controls
Document identified threats, risks, assumptions, mitigation actions, and remediation requirements
Cooperate with development and security teams to gather required information and support remediation activities
Track identified threats, mitigation actions, and remediation progress
Requirements:
Minimum 3 years of professional experience in cybersecurity, IT security, application security, or a related area
Knowledge of IT Security Architecture principles
Basic practical knowledge of threat modelling methodologies, particularly STRIDE
Understanding of cybersecurity threats related to AI agents, machine learning systems, and Large Language Models (LLMs)
Ability to support the identification of assets, trust boundaries, attack surfaces, threat actors, and abuse scenarios
Experience working with or maintaining existing threat models and threat libraries
Ability to map identified threats to relevant security controls and remediation actions
Fluency in English (both written and spoken)
Nice to have:
Ability to translate technical security threats into understandable business risks
Basic knowledge of the OWASP Top 10 for LLM Applications
Familiarity with MITRE ATLAS and its use as a reference framework for AI-related threat assessments
Offer:
Private medical care
Co-financing for the sports card
Constant support of dedicated consultant
Employee referral program
Treść ogłoszenia pochodzi z justjoin.it i należy do jego autora.
Historia oferty
bez zmian od publikacji- Podbita na górę listy
Pracodawca odświeżył ogłoszenie na portalu.
- Opublikowana na justjoin.it