Expert Cyber Security Engineer

Expert Cyber Security Engineer

Ciklum

Remote, Poland

About the role:

As an Expert Cyber Security Engineer, you will join a cross-functional team building the next generation of AI-first, continuously validated security systems. This role goes beyond traditional, one-off pentesting. You will operate at the intersection of offensive security, secure architecture, and automation, helping shift towards a model where systems are continuously tested, challenged, and hardened against real-world adversaries. You’ll combine an attacker’s mindset with proactive design, focusing on long-term, scalable security improvements and identifying risks before they materialize.

Responsibilities:

• AI-Powered Security Operations: Perform AI-powered security reviews and penetration tests using the internal product suite to validate vulnerabilities in real-world scenarios;
• Research & Product Enhancement: Support the engineering team in augmenting AI scanning capabilities - improving coverage, methodology, and test case validation;
• Architect & Threat Model: Lead security design reviews and conduct in-depth threat modeling for new products and critical infrastructure to ensure systems are resilient by design;
• Analysis & Quality Control: Assess the accuracy of identified findings and propose specific improvements to scanning guidelines to continuously raise the security bar;
• Customer Success & Reporting: Present identified findings to customers to help them improve scanning coverage and refine the reporting structure on the platform;
• Defense Strategy: Investigate emerging threats and novel attack vectors, translating these insights into practical, scalable defense strategies.

Requirements:

• 7+ years of hands-on experience across long-term cybersecurity projects, with a strong background in both offensive and defensive security;
• Proven expertise in penetration testing (web applications preferred) and a deep understanding of an attacker’s mindset;
• Solid programming and scripting skills (Python preferred), with experience building security tools, automation, or prototypes;
• Deep technical knowledge in at least one core security domain, such as cryptography, authorization/authentication, secure architecture, or network security;
• Very good communication skills (English).

Desirable:

• Experience securing modern technologies, such as serverless architectures or AI/ML platforms;
• Experience designing and securing cloud-native environments (AWS, GCP, Kubernetes);
• Relevant industry certifications (e.g., OSCP, OSCE, CISSP).