Application Security Specialist

WHO WE ARE:

The Cyber Security team (within the Accenture Security team) assists clients in securing hybrid environment-based systems and applications at every stage of the software development lifecycle, ensuring that the principles of 'Security by design' and 'Security by default' are followed, thereby integrating security into the DevOps and SDLC process.

THE WORK:

• Collaborate with design and development teams to drive innovation by integrating security principles from the very beginning of the SDLC.
• Proactively evaluate applications and systems using OWASP ASVS, OWASP Top 10, CWE Top 25 standards.
• Implement security elements throughout the SDLC.
• Assess security in hybrid architectures, including cloud and container solutions, to enhance operational excellence.
• Conduct security analysis of APIs, applications, and IaC code, propelling secure development practices.
• Support development teams in mitigating vulnerabilities, ensuring scalable growth in secure software environments.

Flexible: The work location for this role may include a mix of working remotely, onsite at a client or in an Accenture office - depending on specific project circumstances.

WHAT’S IN IT FOR YOU?

• Work on projects for international clients, expanding your security skill set. Gain insights and feedback from a diverse team of over 120 cybersecurity experts in Poland and thousands across the world.
• Thrive in an exciting workplace that values and celebrates diverse perspectives. Contribute to a creative environment where your ideas are welcomed.
• Engage in creative projects that foster your development as cybersecurity specialist. Access continuous learning through workshops and skill-building initiatives.

• Permanent employment contract.
• Individual support of a People Lead and a specific path of professional development, as well as the possibility of a session with a Coach.
• A wide training package (soft, technical, and language training offer, access to the e-learning platforms, Gallup test, GenAI training, possibility of co-financing courses, and certification).
• Employee Assistance Program - legal, financial, and psychological consultations.
• Accenture employees eligible for the Employee share purchase plan automatically become eligible for quarterly dividends if they own company shares.
• Paid employee referral program.
• Private medical care, life insurance.
• Access to the MyBenefit platform (possibility of using a wide range of products and services, including the Multisport card).

WHAT WE BELIEVE:

Accenture does not discriminate employment candidates on the basis of race, religion, color, sex, age, disability, national origin, political beliefs, trade union membership, ethnicity, denomination, sexual orientation or any other basis impermissible under Polish law.

All our leaders are committed to building a better, stronger and more durable company for future generations to create positive, long-lasting change. Inclusion and diversity are fundamental to our culture and core values. Our rich diversity makes us more innovative and creative, which helps us better serve our clients and our communities.

Our position as partner to many of the world’s leading businesses, organizations and governments affords us both an extraordinary opportunity and a tremendous responsibility to make a difference. Sustainability is one of our greatest responsibilities, which we embed it into everything we do and for everyone we work with.

HERE’S WHAT YOU’LL NEED:

• Experience in cyber security or a desire to deepen knowledge in this area supported by at least a few years of experience working in IT or as a Developer.
• Reverse Engineering and Malware Analysis knowledge.
• Knowledge of web application security issues (OWASP TOP 10 etc.) and secure coding best practices.
• Knowledge of popular attack methods (XSS, CSRF, SQL injection, etc.) and frameworks such as MITRE and cryptographic best practices.
• Being familiar with issues related to authorization, authentication or session management (SAML, OAuth, SSO, etc.).
• Knowledge of the SSDLC process and its components; Rest API technology and the API Gateway concept.
• Being familiar with one of the following programming languages to a good degree: Java, .Net, C#, JavaScript, Go and scripting languages such as Python.
• Experience in conducting static code analysis.

BONUS POINTS IF YOU HAVE:

• Knowledge of one of the three leading clouds: Azure, GCP or AWS.
• Practical experience working with the following models: on-prem, IaaS, PaaS, SaaS.
• Experience with containerisation (Docker) and containerisation-based infrastructure platforms: Kubernetes, OpenShift, Anthos, etc.