Application Security Specialist (junior/regular/senior)

<p>Accenture is a leading global professional services company that helps the world’s leading businesses, governments and other organizations build their digital core, optimize their operations, accelerate revenue growth and enhance citizen services. We offer solutions and assets across Strategy &amp; Consulting, <b>Technology</b>, Operations, Industry X and Accenture Song.</p><p></p><p><span>The Cyber Security team (within the Accenture Security team) assists clients in securing hybrid environment-based systems and applications at every stage of the software development lifecycle, ensuring that the principles of 'Security by design' and 'Security by default' are followed, thereby integrating security into the DevOps and SDLC process.</span></p><p></p><p><b><span>THE WORK:</span></b></p><ul><li><p>Collaborate with design and development teams to <b>drive innovation</b> by integrating security principles from the very beginning of the SDLC.</p></li><li><p><b>Proactively evaluate</b> applications and systems using OWASP ASVS, OWASP Top 10, CWE Top 25 standards.</p></li><li><p>Implement security elements throughout the SDLC.</p></li><li><p>Assess security in hybrid architectures, including cloud and container solutions, to <b>enhance operational excellence</b>.</p></li><li><p>Conduct security analysis of APIs, applications, and IaC code, <b>propelling secure development</b> practices.</p></li><li><p>Support development teams in mitigating vulnerabilities, ensuring <b>scalable growth</b> in secure software environments.</p></li></ul><p></p><p><b>Flexible:</b> The work location for this role may include a mix of working remotely, onsite at a client or in an Accenture office - depending on specific project circumstances.</p><p></p><p>With all our roles, there is some in-person time for collaboration, learning and building relationships with clients, peers, leaders, and communities. As an employer, we will be as flexible as possible to support your specific work/life needs.</p><p></p><p><b><span>WHAT’S IN IT FOR YOU? </span></b></p><ul><li><p>Work on projects for international clients, <b>expanding your security skill set</b>. <b>Gain insights and feedback</b> from a diverse team of over 120 cybersecurity experts in Poland and thousands across the world.</p></li><li><p>Thrive in an <b>exciting workplace</b> that values and celebrates diverse perspectives. Contribute to a creative environment where your ideas are welcomed.</p></li><li><p>Engage in creative projects that <b>foster your development</b> as cybersecurity specialist. Access continuous learning through workshops and skill-building initiatives.</p></li></ul><p></p><p></p><p></p><p><b><span>HERE’S WHAT YOU’LL NEED:</span></b></p><ul><li><p>Experience in cyber security or a desire to deepen knowledge in this area supported by at least a few years of experience working in IT or as a Developer.</p></li><li><p>Reverse Engineering and Malware Analysis knowledge.</p></li><li><p>Knowledge of web application security issues (OWASP TOP 10 etc.) and secure coding best practices.</p></li><li><p>Knowledge of popular attack methods (XSS, CSRF, SQL injection, etc.) and frameworks such as MITRE and cryptographic best practices.</p></li><li><p>Being familiar with issues related to authorization, authentication or session management (SAML, OAuth, SSO, etc.).</p></li><li><p>Knowledge of the SSDLC process and its components; Rest API technology and the API Gateway concept.</p></li><li><p>Being familiar with one of the following programming languages to a good degree: Java, .Net, C#, JavaScript, Go and scripting languages such as Python.</p></li><li><p>Experience in conducting static code analysis.</p></li></ul><p></p><p><b>BONUS POINTS IF YOU HAVE:</b></p><ul><li><p>Knowledge of one of the three leading clouds: Azure, GCP or AWS.</p></li><li><p>Practical experience working with the following models: on-prem, IaaS, PaaS, SaaS.</p></li><li><p>Experience with containerisation (Docker) and <span>containerisation-based</span> infrastructure platforms: Kubernetes, OpenShift, Anthos, etc.</p></li></ul><p></p><p>Research indicates that some candidates, especially the most diverse ones, may hesitate to apply for positions if they don't meet all requirements. If you believe you possess the necessary skills, even if not meeting every requirement, we wholeheartedly encourage you to submit your application.</p><p></p><p><b><span>WHAT WE OFFER:</span></b></p><ul><li><p>Permanent employment contract.</p></li><li><p>Individual support of a People Lead and a specific path of professional development, as well as the possibility of a session with a Coach.</p></li><li><p>A wide training package (soft, technical, and language training offer, access to the e-learning platforms, Gallup test, GenAI training, possibility of co-financing courses, and certification).</p></li><li><p>Employee Assistance Program - legal, financial, and psychological consultations.</p></li><li><p>Accenture employees eligi