Platform Security Engineer

Platform Security Remediation EngineerJoin a global technology team responsible for securing and maintaining a complex digital ecosystem supporting millions of users worldwide. As a Security Remediation Engineer, you will take ownership of vulnerability management across a large public-facing web estate, working closely with engineering teams to ensure security risks are identified, assessed, prioritized, and remediated effectively.This is a highly technical role combining hands-on security expertise, cloud technologies, vulnerability management, and cross-functional collaboration. 📍 Kraków, Poland🏢 Hybrid model: 6 days per month from the Kraków office💼 B2B Contract💰 150-180 PLN/hYour responsibilitiesOwn and maintain a consolidated view of security vulnerabilities across infrastructure, cloud, applications, CDN, WAF, and CMS layersValidate, triage, and prioritize findings from vulnerability scanners, penetration tests, security reviews, and vendor advisoriesAssess the real business and technical risk of identified vulnerabilities and challenge false positives where appropriateDrive remediation activities across engineering teams and track issues through to successful resolutionSupport patching initiatives across platforms, operating systems, runtimes, and third-party componentsCollaborate with engineers to design mitigation strategies and long-term security improvementsProduce security posture and remediation reports for technology and risk stakeholdersContribute to automation, governance, and continuous improvement of vulnerability management processesWhat we're looking forMust-haveStrong hands-on engineering backgroundExperience in vulnerability management, security remediation, or application/infrastructure securityKnowledge of:Web application securityCDN and WAF technologiesTLS, DNS, and HTTP security mechanismsCommon web attack vectors and mitigation techniquesExperience with cloud platforms, ideally AzureAbility to investigate, reproduce, and assess vulnerability findings beyond automated scanner resultsStrong stakeholder management and communication skillsFluent EnglishNice to haveExperience with WAF policy managementExperience with enterprise CMS platforms (e.g. Sitecore)Scripting or automation skills (Python, PowerShell, etc.)Experience working within highly regulated environmentsSecurity certifications such as CISSP, OSCP, Azure Security Engineer Associate, or similarWhat we offer✅ Long-term cooperation on an international project✅ Work in a global, distributed engineering environment✅ Exposure to modern cloud and web technologies✅ Luxmed private healthcare✅ Multisport card✅ Professional growth within enterprise-scale technology projectsWhy apply for an Antal job offer?When your application is successful, you will be supported by a dedicated Consultant who will stay in regular contact with you (via email or phone), help you prepare for interviews with your future employer, and ensure a smooth and professional recruitment process.About AntalAntal is a leading recruitment and HR advisory company, present in Poland since 1996 and later expanded to the Czech Republic and Hungary. Across the CEE region, we employ around 150 professionals who deliver a full range of services – from specialist and executive recruitment, employee outsourcing and HR consulting, to employer branding and market research.Our division-based structure combines deep industry expertise with functional specialisation, enabling us to provide tailored solutions for companies in every sector. We act as a trusted partner for both employers and candidates, sharing our knowledge and guiding them through every stage of the talent journey. We connect exceptional people with the right opportunities and help organisations build successful teams.