About the Team
The Cyber Security team, part of Accenture Security, supports organizations in building secure, resilient, and scalable security capabilities across complex enterprise technology landscapes — integrating security into software development, cloud adoption, digital transformation, and technology modernization so that security by design and security by default are reflected in how systems are actually built and operated, not only in policy. We act as trusted advisors to some of the world's leading organizations, helping them define pragmatic security operating models, improve security maturity, and align cybersecurity capabilities with their business and technology objectives. Working at the forefront of the industry means constant exposure to complex, high-stakes security challenges and the latest technologies — across banking, manufacturing, healthcare, retail, and public sector, each with its own regulatory context and technical scale. As part of a global security leader, you work on engagements that span the full breadth of modern enterprise security — from securing AI-enabled systems and cloud-native architectures to embedding security into large-scale digital transformation programmes.
What You'll Do
•Design, build, and run secure CI/CD pipelines. Automate the security steps so they scale — with Ansible, Azure DevOps, Jenkins, GitLab, Argo CD — and integrate scanning tooling such as Snyk, Veracode, Checkmarx, OpenText, or WIZ so that results are trusted and acted on.
•Secure public cloud and container environments. Run security assessments of hybrid solutions, help teams harden Azure, GCP, or AWS and their microservices platforms for compliance and resilience, and support migration and transformation work.
•Review APIs, source code, and deployment processes in depth to find what is exploitable and get it fixed — then put API security platforms and real-time monitoring in place.
•Threat-model applications and design the fix. Analyse how a system could be attacked, propose mitigations the team can realistically ship, and work with design and development teams to embed security from the start of the SDLC.
•Work on the security of AI-driven systems across their whole lifecycle, from design and development through to deployment — and use AI-driven approaches and tooling to make security work faster.
•Act as a trusted advisor on secure design principles and where cloud and application security is heading, and help clients raise their DevSecOps and AppSec maturity.
•Work location may include a mix of remote, onsite at a client, or Accenture office, depending on project circumstances, with some in-person time for collaboration, learning and relationship-building.
Requirements
•A real engineering or IT background — several years in IT, DevOps, platform engineering, or a related role; you have built, run, or automated systems and know what breaks in production.
•Security fundamentals you understand rather than memorized: confidentiality, integrity, and availability; how applications get attacked (SQL injection, XSS, CSRF, OWASP Top 10); what encryption, hashing, and secrets management are for.
•Hands-on experience with CI/CD pipelines: at least one of Azure DevOps, GitLab CI, Jenkins, GitHub Actions, Argo CD, or similar; Git as a daily tool.
•Experience with one public cloud — Azure, GCP, or AWS.
•A basic understanding of containers and orchestration — Docker, and Kubernetes or OpenShift, at the level of knowing how a workload gets scheduled, exposed, and given credentials.
•Enough code to automate and to review — scripting in Python, Bash, or similar, and the ability to read someone else's Java, C#, JavaScript, or Go well enough to reason about what it does.
•Professional proficiency in both English and Polish is required. English is the primary language for client-facing work (findings communication, workshop facilitation, presentations to senior stakeholders). Polish is the language of day-to-day team operations. Proficiency in both is non-negotiable.
•Strong communication skills, including the ability to translate complex technical findings into clear, actionable recommendations for non-technical audiences.
•Curiosity and adaptability — comfortable reading unfamiliar documentation, prototyping, and defining what "good" looks like in a new domain.
•A proactive, ownership-oriented mindset.
Seniority Levels
•Regular (approximately 2–5 years of relevant experience): expected to independently deliver defined workstreams — building and securing pipelines, integrating and tuning scanning tools, reviewing deployments and cloud configuration, and communicating findings to client technical teams. Working knowledge of the OWASP Top 10 and secure coding principles expected, with continued development across the broader requirements list.
•Senior (approximately 5+ years of relevant experience): expected to lead workstreams, provide technical direction, and mentor junior colleagues. Requires demonstrated depth in at least one domain (cloud platform security, pipeline and automation engineering, containers, API and application security, or AI security), plus breadth to engage credibly across all areas and present to senior client stakeholders.
Years of experience are guidance only, not a strict eligibility criterion; candidates from development, platform engineering, SRE, or in-house security roles are encouraged to apply. Seniority is assessed during the interview process, not at CV screening.
Nice to Have (any one is a plus; not required for Regular, expected in depth for Senior)
•Practical experience with SAST, DAST, and SCA tools and integrating them into CI/CD pipelines.
•DevSecOps tooling from vendors such as Snyk, WIZ, IriusRisk, CrowdStrike, Aqua Security, Checkmarx, OpenText, Veracode, or Argo CD.
•Authentication, authorisation, and session management — SAML, OAuth, SSO.
•SSDLC processes end to end, and integrating security into DevOps pipelines rather than alongside them.
•REST API technology and API Gateway concepts; application and API security principles.
•Conducting security reviews of API designs, source code, and deployments; implementing API security platforms and monitoring solutions.
•Threat modelling with mitigation strategies that survive contact with a delivery schedule.
•Web application security frameworks and taxonomies: OWASP Top 10, secure coding practice, and MITRE.
•Infrastructure as Code and configuration management: Terraform, Ansible, or similar.
•Foundational knowledge of AI model architectures — memory context, prompt engineering, integration with external services — and awareness of AI-related security risks such as prompt injection, data leakage, and model misuse.
•Building and integrating solutions using Large Language Models — Azure OpenAI, LangChain, REST APIs, embeddings, vector databases.
•Writing scripts, prototypes, and micro-applications, plus good working knowledge of at least one programming language — Java, .NET/C#, JavaScript, Go, or Python.
•Prior consulting or client-facing experience.
•A development, platform engineering, SRE, or in-house security background.
•Security or cloud certifications (Accenture co-finances certifications once you are here).
What's Offered
•Work on international cybersecurity transformation programmes for leading organisations, with the support of a team of more than 150 cybersecurity specialists in Poland and thousands more worldwide.
•Breadth across industries: banking, manufacturing, healthcare, retail, and public sector within a single year.
•Constant exposure to emerging technologies, current tooling, and evolving practice.
•Room to set direction and grow as a trusted advisor, leading security discussions with technical, operational, and senior stakeholders.
•Collaboration with a diverse team of cybersecurity experts in an environment focused on innovation, continuous learning, and practical business outcomes.
•A wide catalogue of development opportunities: technical, soft-skills, and language training, e-learning platforms, GenAI training, and security certifications.
•Permanent employment contract.
•Individual support of a People Lead and a specific professional development path, plus possibility of a session with a Coach.
•Employee Assistance Program — legal, financial, and psychological consultations.
•Employee share purchase plan with eligibility for quarterly dividends.
•Paid employee referral program.
•Private medical care, life insurance.
•Access to the Worksmile platform, including the Multisport card.
