Security Remediation Engineer

Quick Facts

• Own IKP infrastructure vulnerability posture
• Triage, prioritize, and remediate across CDN/WAF/hosting/CMS/application
• Hands-on remediation and validation of fixes

Description

You will own and maintain the IKP infrastructure vulnerability position, consolidating open findings across CDN, WAF, hosting, CMS, and application layers. You will triage and prioritize scanner findings (validate, deduplicate, assess exploitability), challenge false positives/severity issues with evidence, and translate findings into actionable remediation tasks for platform, Akamai, Azure, and Sitecore engineers. You will provide hands-on fixes (WAF tuning, patching, upgrades, and mitigation design) and verify that remediation resolves the findings.

Role Description & Responsibilities

• Maintain a consolidated view of open vulnerability findings across multiple layers
• Triage incoming findings: validate, deduplicate, assess exploitability; set priorities and remediation deadlines
• Challenge false positives and overstated severity with supporting evidence
• Drive remediation by creating actionable work for platform and engineering teams
• Coordinate remediation within sprints and change windows to avoid disruption
• Provide hands-on technical support for complex fixes (e.g., WAF rule tuning, patching, dependency upgrades, mitigation design)
• Track remediation progress and verify fixes resolve findings rather than only suppressing them
• Own patching cadence and currency across OS, runtimes, CMS, and third-party components
• Plan and coordinate patching campaigns across regions and maintenance windows
• Identify structural root causes of recurring vulnerabilities (unsupported versions, unmanaged dependencies, configuration drift)
• Produce vulnerability and patching status reports for leadership and risk functions
• Evidence remediation against internal security policy timeframes; support audit and regulatory requests
• Represent the platform in security governance forums, remediation reviews, and risk acceptance discussions
• Escalate issues effectively when necessary

Requirements

• 6–8 years of senior hands-on engineering experience
• Vulnerability management or security remediation experience at scale in production environments
• Working knowledge of web infrastructure: CDN, WAF, TLS, DNS, HTTP security headers, and web attack mitigations
• Cloud experience, preferably Azure (patching, configuration baselines, identity, network controls)
• Ability to interpret, reproduce, and assess scanner findings within the system architecture
• Familiarity with vulnerability scoring/prioritization frameworks and ability to articulate risk clearly
• Proven ability to drive work through non-direct reports using influence, clarity, and follow-through
• Strong written English and experience working with stakeholders across multiple countries/time zones
• Experience with WAF policies and security controls
• Experience with Sitecore or comparable enterprise CMS
• Scripting/automation skills (Python, PowerShell, or similar) for tooling integration and reporting
• Familiarity with regulated financial services environments and operational resilience expectations
• Relevant certification (CISSP, OSCP, Azure Security Engineer Associate) or comparable practical expertise

Benefits

• Medicover medical care and dental care
• Medicover Benefits platform and Medicover Sport card
• Referral Program; Layette for a newborn employee’s child
• Group life insurance and pension scheme
• Full-time employment contract; hybrid work model (Kraków); stable and long-term cooperation
• Well-defined career path and opportunity to relocate across ALTEN Polska branches
• Access to professional certifications with technology partners; industry events; Knowledge Sharing Program; Referral Program
• Collaboration options based on B2B or Contract of mandate (UZ)