- Guidewire product vulnerability management process for all Guidewire applications.
- Coordination of customer/external product security incidents and reported security issues affecting various Guidewire products and applications.
- Working cross-functionally with all business units, sustaining engineers, product security team members, customer support, legal and external security researchers to ensure timely resolution of security incidents and events.
- Development, maintenance and continuous improvement of the product security incident monitoring, detection and response tools and process, including all required supporting materials.
- Pen testing Guidewire applications to ensure timely discovery of the vulnerabilities.
- Security Review and Code Review of Guidewire applications
- Lead and own PSIRT Process - triage security related issues (external / internal), verify those on different versions, products.
- Perform root cause analysis to ensure validity of reported issues.
- Triage code defect based issues, quantitatively evaluate risk and provide guidance to engineering teams regarding the impact of security issues using industry standard metrics such as CVSS.
- Work closely with project management, product management, engineering and sustaining teams to drive issues to closure.
- Cultivate strong working relationships with external researchers, reporting organizations and customers to ensure effective collaboration. Work with customer facing and internal teams to continually improve processes used to identify and fix product security issues
- Enhance existing product security incident response program
- Coordinate with internal product development teams in accomplishing regular security reviews and penetration testing assessments.
- Execute the penetration tests internally to identify security vulnerabilities.
- Perform security-focused code reviews
- Support the preparation of security releases.
- Create security guidance and documentation
- Develop security tooling and automation
- Develop and deliver security training and outreach to internal development teams
- Assist teams in reproducing, triaging, and addressing application security vulnerabilities.
-
Senior Test Penetration Engineer
2 dni temu
Guidewire Kraków, Polska W pełnym wymiarze godzinGuidewire PSIRT (Product Security Incident Response Team) is responsible for: · Guidewire product vulnerability management process for all Guidewire applications. · Coordination of customer/external product security incidents and reported security issues affecting various Guide ...
-
Embedded Penetration Tests Engineer
2 dni temu
endegospzoo Kraków, PolskaEndego is all about people · At Endego, we take pride in creating comprehensive engineering solutions that set standards in the industry. Our specialization covers sectors such as automotive, railway, agriculture, heavy-duty vehicles, commercial vehicles (such as buses), and addi ...
-
Cyber Security Engineer
4 dni temu
KION Group Kraków, Polska W pełnym wymiarze godzinWhat we offer: · The opportunity to work in the fast growing worldwide company · Attractive remuneration based on your experience, skills and development · The opportunity to participate in the international projects and a significant influence on company IT development · Yo ...
-
Threat Hunter
1 dzień temu
Hsbc Service Delivery Kraków, Polska W pełnym wymiarze godzinTechnologies-expected : AWS Microsoft Azure about-project : Sitting within the Monitoring and Threat Detection sub-function, the 'Cybersecurity Threat Hunter' role is primarily charged with proactively searching through the HSBC global estate for evidence of malicious activities ...
-
Cyber Security Penetration Tester
4 dni temu
HITACHI ENERGY SERVICES SP. Z O.O. Kraków, Polska W pełnym wymiarze godzinDescription · : Requirements: · In-depth knowledge of TCP/IP networking and application protocols concepts · Understanding of software exploitation and common vulnerabilities · Understanding of port scanning, vulnerability assessment and fuzzing tools · Knowledge of protocols ...
-
Cloud Security Engineer
5 dni temu
Michael Page Kraków, PolskaCONDITIONS: · Hybrid working, but flexible hours · Permanent employment contract (UoP) · DUTIES: · Designing, implementing, and maintaining cloud security solutions to ensure the confidentiality, integrity, and availability of our cloud infrastructure, applications, and data. · C ...
-
Application Security Engineer
5 dni temu
GPC Global Technology Center Kraków, PolskaAs we continue to scale and evolve, it has become increasingly important for us to protect our applications. That's why we're looking for an experienced Senior Security Engineer in the area of application security for AI systems. Join our GenAI team and contribute to the developm ...
-
Senior Product Security Engineer
5 dni temu
Zendesk Kraków, Polska W pełnym wymiarze godzinJob Description · Are you passionate about application security? Do you get a thrill out of discovering security vulnerabilities in web applications and mobile apps? Do you enjoy the challenge of designing creative solutions to tough problems? Are you excited about securing the p ...
-
Application Security Specialist
1 dzień temu
Cognizant Kraków, Polska W pełnym wymiarze godzinLocation: Poland, Kraków · What we do: · As Top Employer, we are dedicated to helping the world's leading companies build stronger businesses — helping them go from doing digital to being digital. Cognizant Poland offices are in Gdansk, Wroclaw, and Kraków. With the capacity to ...
-
ACCOUNT MANAGER
4 dni temu
TE Connectivity Kraków, PolskaBei TE Connectivity geben wir Ihnen Raum zur beruflichen Entfaltung, und die Möglichkeit über Länder und Kulturen hinweg mit Kollegen zusammenzuarbeiten, mit dem Ziel eine sicherere, nachhaltige, produktive und vernetzte Zukunft zu gestalten. · Requierements: · • Understand th ...
-
IT Cyber Security Specialist
1 dzień temu
Selvita Kraków, PolskaLocation · "> Kraków, Poland Offer description Selvita is a global integrated drug discovery partner for the pharmaceutical and biotechnology industries with laboratories in Poland (Krakow & Poznan) and offices in Cambridge, UK, Greater Boston Area & San Francisco Bay Area in t ...
-
Technical Lead
3 dni temu
Team Quest Krakow, Polska Umowa o pracęResponsibilites: · Execution of the Technology, Architecture, IT Security, and DevOps strategy of GILDS in the tribe · Managing and providing technical expertise to the tribe · Orchestrating technical development within the tribe · Accountable Enabling the product teams to effe ...
-
Senior Cloud Security Architect
5 dni temu
Pegasystems Kraków, PolskaMeet Our Team: · Are you ready to take your career to the next level? Do you crave the opportunity for interaction with senior and executive management, customers and architects while working for a company that is changing the way the world builds enterprise software? Cloud Secu ...
-
Application Security Specialist
1 dzień temu
Cognizant Technology Solutions Krakow, Polska OTHERLocation: Poland, Kraków · What we do: · As Top Employer, we are dedicated to helping the world's leading companies build stronger businesses — helping them go from doing digital to being digital. Cognizant Poland offices are in Gdansk, Wroclaw, and Kraków. With the capacity to s ...
-
ACCOUNT MANAGER
1 tydzień temu
TE Connectivity Kraków, PolskaBei TE Connectivity geben wir Ihnen Raum zur beruflichen Entfaltung, und die Möglichkeit über Länder und Kulturen hinweg mit Kollegen zusammenzuarbeiten, mit dem Ziel eine sicherere, nachhaltige, produktive und vernetzte Zukunft zu gestalten. · Über TE Connectivity: · TE Connecti ...
-
Infrastructure Security Engineer, WatsonX Orders – ML
21 godzin temu
IBM Skawina, PolskaIntroduction · We are looking for a skilled Security Engineer to help secure infrastructure & applications across AWS, k8s, and edge location for our ML powered AI. · Your Role and Responsibilities · Collaborate with compliance leaders, software developers, and SREs to implement ...
Staff Test Penetration Engineer - Kraków, Polska - Guidewire
Opis
Guidewire PSIRT (Product Security Incident Response Team) is responsible for:
We are looking for a new team member who will be responsible to perform following activities (but not limited to)