IT Security Expert (M/F/D)
⚲ Warszawa
Do uzgodnienia
Wymagania
- Cybersecurity
- Security
- MITRE ATT&CK
- SIEM
- CISSP
- CISM
- CEH
- OSCP
Opis stanowiska
In Contract Logistics IT, we are a global team of skilled professionals, dedicated to helping DSV business create more value through secure, efficient, and innovative IT solutions.
As a Cybersecurity Specialist you will support the protection of DSV Contract Logistics IT platforms, including Warehouse Management Systems, integrations, and cloud solutions. Here you will focus on identifying and mitigating cybersecurity risks while embedding security into IT solutions without impacting operational continuity. You will work closely with Group IT Security, SOC, and IT Risk Management.
Your responsibilities:
•
Assess and manage cybersecurity threats and risks impacting Contract Logistics IT solutions
• Perform threat modelling and support penetration testing, vulnerability assessments, and security audits
• Embed security-by-design principles into application and platform designs
• Support security incident detection, analysis, and reporting for Contract Logistics systems
• Act as cybersecurity subject matter expert for Contract Logistics IT stakeholders
• Collaborate with the SOC to improve monitoring, detection, and response capabilities
• Work hands-on with security tooling (e.g. SIEM, EDR, vulnerability scanners, SOAR)
• Report and manage cybersecurity risks in coordination with the IT Risk Manager
• Maintain security documentation and support policy and framework development
Our requirements:
•
Experience in cybersecurity or IT security within an enterprise environment
• Strong understanding of network, endpoint, email, and cloud security
• Experience with secure application development and vulnerability management
• Knowledge of MITRE ATT&CK and adversary TTPs
• Experience with SIEM use cases and/or threat hunting is a strong advantage
• Experience in logistics, supply chain, or warehouse IT environments is a plus
Nice to have:
• Degree in IT, Cybersecurity, or related field
• Relevant security certifications (e.g. CISSP, CISM, CEH, OSCP, cloud security)
• Experience in logistics, supply chain, or warehouse IT environments
What we offer:
• Employment based on an employment contract, along with a comprehensive benefits package
• Training and development programs, as well as access to an e-learning platform
• Onboarding program with the support of a dedicated Buddy
• Participation in an annual, company-wide integration event
• A work environment based on Scandinavian organizational culture
• Opportunities for growth through our internal program
Benefits:
• Sharing the costs of sports activities
• Private medical care
• Sharing the costs of foreign language classes
• Sharing the costs of professional training & courses
• Life insurance
• Integration events
• Corporate gym
• Corporate sports team
• Coffee / tea
• Parking space for employees
• Extra social benefits
• Holiday funds
• Christmas gifts
• Employee referral program
• Charity initiatives
• Bicycle parking
• Modern and ergonomic office
• Yoga in the office
As a Cybersecurity Specialist you will support the protection of DSV Contract Logistics IT platforms, including Warehouse Management Systems, integrations, and cloud solutions. Here you will focus on identifying and mitigating cybersecurity risks while embedding security into IT solutions without impacting operational continuity. You will work closely with Group IT Security, SOC, and IT Risk Management.
Your responsibilities:
•
Assess and manage cybersecurity threats and risks impacting Contract Logistics IT solutions
• Perform threat modelling and support penetration testing, vulnerability assessments, and security audits
• Embed security-by-design principles into application and platform designs
• Support security incident detection, analysis, and reporting for Contract Logistics systems
• Act as cybersecurity subject matter expert for Contract Logistics IT stakeholders
• Collaborate with the SOC to improve monitoring, detection, and response capabilities
• Work hands-on with security tooling (e.g. SIEM, EDR, vulnerability scanners, SOAR)
• Report and manage cybersecurity risks in coordination with the IT Risk Manager
• Maintain security documentation and support policy and framework development
Our requirements:
•
Experience in cybersecurity or IT security within an enterprise environment
• Strong understanding of network, endpoint, email, and cloud security
• Experience with secure application development and vulnerability management
• Knowledge of MITRE ATT&CK and adversary TTPs
• Experience with SIEM use cases and/or threat hunting is a strong advantage
• Experience in logistics, supply chain, or warehouse IT environments is a plus
Nice to have:
• Degree in IT, Cybersecurity, or related field
• Relevant security certifications (e.g. CISSP, CISM, CEH, OSCP, cloud security)
• Experience in logistics, supply chain, or warehouse IT environments
What we offer:
• Employment based on an employment contract, along with a comprehensive benefits package
• Training and development programs, as well as access to an e-learning platform
• Onboarding program with the support of a dedicated Buddy
• Participation in an annual, company-wide integration event
• A work environment based on Scandinavian organizational culture
• Opportunities for growth through our internal program
Benefits:
• Sharing the costs of sports activities
• Private medical care
• Sharing the costs of foreign language classes
• Sharing the costs of professional training & courses
• Life insurance
• Integration events
• Corporate gym
• Corporate sports team
• Coffee / tea
• Parking space for employees
• Extra social benefits
• Holiday funds
• Christmas gifts
• Employee referral program
• Charity initiatives
• Bicycle parking
• Modern and ergonomic office
• Yoga in the office
🔍 Dekoder Ogłoszenia
🔴
embedding security into IT solutions without impacting operational continuity
Oznacza to, że bezpieczeństwo ma być priorytetem, ale nie może spowalniać ani przerywać bieżących operacji biznesowych, co może być trudne w praktyce.
🟡
Act as cybersecurity subject matter expert for Contract Logistics IT stakeholders
Może oznaczać, że będziesz musiał tłumaczyć złożone kwestie bezpieczeństwa osobom nietechnicznym i przekonywać ich do wdrożenia odpowiednich rozwiązań.
🟡
Work hands-on with security tooling (e.g. SIEM, EDR, vulnerability scanners, SOAR)
Wskazuje na praktyczne wykorzystanie narzędzi, co jest pozytywne, ale może też sugerować, że będziesz odpowiedzialny za konfigurację i utrzymanie tych narzędzi.
🟡
support policy and framework development
Może oznaczać, że będziesz brał udział w tworzeniu lub aktualizacji dokumentacji bezpieczeństwa, co jest ważną, ale często czasochłonną częścią pracy.