About XTB
XTB is a global financial industry company focused on online trading of financial instruments. It operates across several countries, including Asia and South America, and is the largest FinTech in Poland and a leader in Central and Eastern Europe.
Responsibilities
•Respond to and handle ICT security incidents and support security monitoring operations
•Maintain, evaluate, and implement cybersecurity tools and solutions
•Manage vulnerability scans and execute vulnerability assessment and mitigation across networks, web and mobile environments, on-premises systems, and cloud infrastructure in cooperation with technology teams
•Support threat modeling from an attacker's perspective, including reviewing and testing IT systems for secure configuration
•Establish and promote security best practices, and prepare and conduct cybersecurity training sessions
Requirements
•At least 5 years of technical experience in IT security, such as Security Engineer, Pentester, or L3 SOC Analyst
•Practical experience in either Blue Teaming or Red Teaming
•Experience conducting vulnerability scans and risk assessments, and creating technical documentation, procedures, and security guidelines
•Practical knowledge of security controls for operating systems, computer networks, web and mobile applications, and cloud environments
•Strong skills and experience conducting training sessions and collaborating with development teams, DevOps, and business stakeholders
•Good command of English for effective communication
Nice to have
•Industry standards, regulations, and best practices supported by training, courses, or certifications such as OSCP, CEH, CISSP, or ISO/IEC 27001
•Practical experience managing the ICT incident response process and security tool architecture
•Scripting and automation skills such as Python or Bash
•Familiarity with CI/CD processes
Conditions
•A training budget for courses and conferences
•An extra day off on your birthday
•An extra day off for parents
•Equipment tailored to your needs
•Private medical care and group insurance
•Access to an e-learning platform for learning English and a benefits platform
•Access to a wellbeing platform, workshops, and private therapy sessions
•The role can be performed remotely, from the Warsaw office, or from a coworking space in your city
