Описание
TRD Professional Services is looking for a Senior Information Security Engineer (development-focused white hat) to identify and reduce risk across our applications and support the secure development of new customer projects. The role works closely with development and QA teams to embed security into the full software lifecycle, covering threat modelling, secure coding, vulnerability management, application hardening and PCI compliance. Задачи
Review new application designs with architecture and development teams to identify security risks early and flag potential blockers before implementation begins Lead threat modelling sessions with dev, QA and business teams to identify risks early in solution design Review code and binary scan results, working with developers to fix vulnerabilities during development Assess and manage existing vulnerabilities using CVSS and according to Amadeus processes, define remediation actions and follow up on mitigation plans Drive operational security and hardening of applications and their supporting systems, ensuring security requirements are defined and maintained through to operations Analyze, classify and prioritize application security incidents, and support their response and remediation with the development and platform teams Support PCI-DSS compliance by collecting audit evidence with dev, QA and platform teams Work with QA to ensure adequate security test coverage across functional and non-functional testing Work across the organization to integrate security logging and monitoring into applications Serve as the key technical interface on application security for internal stakeholders Provide technical leadership and mentor team members on secure development practices Take part in evaluating new security tools and technologies Требования
Relevant experience in software development (.NET), application security, or infrastructure security (AWS/Azure) Strong knowledge of secure development practices, threat modelling, vulnerability management and system/application hardening Ability to work independently, influence technical decisions and act as a reference for less experienced colleagues Excellent communication, collaboration, and problem-solving skills Будет плюсом: Experience with Amadeus LSS and Amadeus Robotics is a plus Условия
At Amadeus, you'll power the future of travel with a critical mission and extraordinary purpose. Everything at Amadeus is global, from our people to our business, which translates into our footprint, processes, and culture. Learning happens all the time and in many ways at Amadeus, from on-the-job training to formal activities, and daily interactions. Amadeus fosters a caring environment that supports both professional growth and personal well-being. Embrace our flexible working model, enabling you to excel wherever and however you work best. We are committed to enabling each employee to reach their full potential by fostering a culture of belonging and fair treatment. Trust and reliability are fundamental to shaping our relationships with customers, partners, and employees.
Information security engineer in Warsaw – pracodawca: Amadeus
Amadeus to doskonały pracodawca, oferujący dynamiczne środowisko pracy, które sprzyja innowacjom i współpracy. Pracownicy mają możliwość rozwoju zawodowego poprzez uczestnictwo w globalnych projektach oraz dostęp do szkoleń, co pozwala na ciągłe doskonalenie umiejętności. Dodatkowo, elastyczny model pracy hybrydowej umożliwia zachowanie równowagi między życiem zawodowym a prywatnym, co czyni Amadeus atrakcyjnym miejscem dla osób poszukujących satysfakcjonującej kariery w branży technologii podróży.
