Application Security Specialist (Cybersecurity)

Location: Hybrid in Wrocław, Poland, with approximately 1 day per week in the office; 75% remote

Rate: up to 80 PLN/h on a B2B basis

Company

hirify.global is a recruitment and consulting company providing HR and IT services, including project-based and permanent opportunities for clients in Poland and abroad.

What you will do

• Support development teams in integrating security into the software development lifecycle and applying secure coding practices.
• Perform application security assessments, analyse findings, prioritise risks, and guide vulnerability remediation.
• Use SAST, DAST, SCA, and other security testing technologies to identify application risks.
• Contribute to threat modelling, security design reviews, and the adoption of security patterns.
• Integrate and improve AppSec tools and processes in CI/CD pipelines and development workflows.
• Communicate findings, support security awareness, and help teams implement security requirements, standards, and internal policies.

Requirements

• Degree in Computer Science, Information Security, Cybersecurity, or a related field, or equivalent practical experience.
• 4–5 years of experience in application security, software security, secure software development, or a closely related field.
• Hands-on experience with application security assessments, vulnerability analysis or security testing, and fixing security issues with development teams.
• Intermediate programming or scripting skills in Python, Java, or .NET, with experience building digital products.
• Experience with AppSec tools such as Semgrep, SonarQube, HCL AppScan, ZAP, Black Duck, or Sonatype Lifecycle, or comparable tools.
• Good understanding of OWASP Top 10, OWASP ASVS, and other relevant OWASP standards.
• Familiarity with SAST, DAST, SCA, DevSecOps, version control, and CI/CD integration, preferably Jenkins, Git, Docker, or Kubernetes.
• Experience with cloud-native application security, containers, or Kubernetes.
• Understanding of vulnerability management, risk assessment, and remediation processes.
• Strong analytical skills, attention to detail, ability to explain technical findings to different audiences, and a collaborative, proactive mindset with a sense of ownership.
• Fluent English required.

Nice to have

• Experience with threat modelling and security design reviews.
• Familiarity with NIST, OWASP DSOMM, and OWASP SAMM.
• Application security or cybersecurity certifications.
• Awareness of emerging regulations such as the EU Cyber Resilience Act.

Culture & Benefits

• Full-time engagement of 40 hours per week in a hybrid model.
• B2B cooperation agreement signed directly with hirify.global, the recruitment and contracting party.
• Opportunity to work with a global industrial-sector client through a recruitment and consulting company.
• Project-based and permanent job opportunities are available within hirify.global's broader client network.