Application Security Expert (Cloud Security)

Location: Warsaw, Poland; hybrid work with 1–2 days per week from the office

Company

T-Mobile Poland provides telecommunications solutions with a focus on innovation, security, and operational integrity.

What you will do

• Identify opportunities to automate and standardize application security controls in cooperation with the CI/CD team.
• Analyze source code and mitigate application weaknesses and vulnerabilities.
• Create, document, and supervise the implementation of application security guidelines and standards.
• Review automated security testing results and perform secure design and software architecture reviews for on-premises and cloud deployments.
• Work with IT, cloud, and engineering teams to architect and implement secure-by-design solutions.
• Build frameworks and libraries that provide security by default.

Requirements

• 4+ years of full-time commercial application security experience and 4+ years of software development experience, preferably in cloud environments.
• Experience architecting and building application security for modern technology stacks across web, mobile, and desktop platforms.
• Experience with threat modeling and secure design reviews.
• Knowledge of AWS and cloud security best practices, Kubernetes and containerization security, OWASP Top 10, OWASP Testing Guide, OWASP ASVS, NIST, and SANS Top 20.
• Proficiency with web technologies including HTTP, HTML5, AJAX, and REST, plus basic knowledge of networking.
• Understanding of applied cryptography, including encryption, hashing, MACs, digital signatures, TLS, password storage, OAuth, SAML, and OIDC.

Nice to have

• Application Security certifications.
• Cloud or cloud security certifications.

Culture & Benefits

• B2B contract.
• Hybrid collaboration model with regular office presence in Warsaw.
• Close cooperation with IT, cloud, development, engineering, and CI/CD teams.