Cybersecurity Design Reviewer/Architect

O projekcie: - International Environment - Work with a professional team in a dynamic, global setting. - Growth & Development - Access to top-tier training and career advancement opportunities. - Premium Workspace - High-end office in the heart of Warsaw.\ - Hybrid work environment (3 days onsite) - 12 months contract with ability to convert to FTE Wymagania: Strategic Staffing Solutions International client is a leading global financial services firm providing investment banking, Global Market and investment management services to a substantial and diversified client base that includes corporations, financial institutions, governments, and high-net-worth individuals. The company is headquartered in New York and maintains offices in London, Frankfurt, Tokyo, Bengaluru, Hong Kong and other major financial centers around the world. Basic Qualifications: - 4+ years of experience in application security and/or cloud security - Experience with threat modeling or secure design and architecture reviews - Degree in Computer Science, Engineering, Cybersecurity, or Information Security - Strong knowledge of common vulnerabilities (OWASP Top 10, cloud security gaps) - Hands-on experience with AWS security services (IAM, KMS, CloudTrail, GuardDuty, Inspector) - Knowledge of authentication and authorization protocols (OAuth, OIDC, SAML) - Understanding of secure coding practices and security controls - Experience with vulnerability assessment and penetration testing tools - Familiarity with modern web technologies and stacks - Knowledge of cryptography concepts such as TLS, encryption, and hashing - Strong English communication skills - Ongoing interest in learning about emerging security threats Codzienne zadania: - Conduct cybersecurity design reviews for web applications, AWS infrastructure, and AI/ML solutions, challenging and validating proposed architectures. - Serve as a cybersecurity advisor, providing expert guidance on secure design and implementation strategies. - Drive organizational change by creating, documenting, and promoting effective security patterns. - Lead risk read-out calls, articulating security risks and recommending mitigation strategies. - Analyze penetration test and code review reports, guiding teams to resolve security issues. - Mentor junior team members and foster development in cybersecurity practices.