Junior Application Security Engineer

O projekcie

Team description

The Cybersecurity team plays a key role in supporting Toyota’s digital transformation across Europe. By joining the team, you will help strengthen security in a modern enterprise environment, contribute to protecting critical digital assets, and support secure innovation across the business. We are committed to creating a collaborative, respectful, and inclusive environment where people with different backgrounds, experiences, and perspectives can thrive, learn, and grow.

Role Summary

We are looking for a Junior Application Security Engineer who is passionate about technology, eager to learn, and excited to build a career in secure software development and application security within a supportive and inclusive enterprise environment.

In this role, you will work closely with development and security teams to help embed secure-by-design practices into the software development lifecycle. You will gain hands-on exposure to areas such as threat modelling, vulnerability remediation, secure coding, and application security tooling, while learning from experienced colleagues in a supportive team environment. This position offers an excellent opportunity for someone who is curious, collaborative, and motivated to grow into a capable application security professional.

Formal Role Details

• Job Type: Permanent contract
• Start date: From October 2026
• Location: Wrocław, Silver Tower Office Center
• Working Pattern: Hybrid - typically 2 to 3 days per week in the office, offering flexibility alongside collaboration with the team
• Reporting line: Manager Application security
• Education level: Degree in a relevant field or equivalent practical experience

Zakres obowiązków

• Support the integration of security practices into development pipelines, including SAST/DAST and CI/CD security controls
• Help promote secure-by-design principles and shift-left engineering practices across teams
• Assist in threat modelling activities for applications and projects, helping document risks and mitigation actions
• Support teams in identifying, tracking, and remediating vulnerabilities
• Partner with developers and project teams to provide practical application security support
• Help translate technical security findings into clear and actionable guidance
• Contribute to security awareness and secure coding initiatives within engineering teams
• Learn from and collaborate with security experts and cross-functional teams to share best practices
• Support the creation and maintenance of documentation, guidelines, and reusable security assets
• Contribute to tracking application security improvements and reporting activities

Wymagania Qualifications

• Experience can be gained through work, internships, academic projects, community involvement, self-directed learning, or personal projects in Application Security, Secure Software Development, Software Engineering, or a related area
• Understanding of the software development lifecycle and interest in secure development practices, with the expectation to continue learning on the job
• Relevant knowledge may come from development, engineering, computer science, cybersecurity, or other comparable technical backgrounds

We welcome candidates from a wide range of backgrounds, including non-traditional career paths, career returners, internships, academic projects, self-directed learning, and transferable technical experience. If you are excited about application security and meet many of the requirements, we still encourage you to apply. We value potential, curiosity, a growth mindset, and the different perspectives people bring to the team.

Core Technical Skills

• Awareness of common application security vulnerabilities and interest in learning how to identify and address them
• Awareness of threat modelling concepts and interest in learning how to apply them in practice
• Experience with programming can come from academic work, bootcamps, personal projects, internships, or professional roles
• Exposure to secure development practices, code review, or security testing through coursework, projects, internships, or early professional experience is helpful

Communication & Collaboration Skills

• Ability to explain technical concepts clearly and willingness to learn from feedback
• Collaborative mindset and ability to work effectively with developers, security colleagues, and other stakeholders
• Strong curiosity, constructive and collaborative approach, and motivation to develop technical and professional skills

Desirable Skills

• Awareness of frameworks such as OWASP SAMM, BSIMM, or NIST SSDF is helpful but not required
• Exposure to cloud platforms, containers, or Kubernetes security through study, labs, projects, or practical experience is beneficial

Certifications (Optional)

• Entry-level or foundational certifications such as Security+, ISC2 CC, or equivalent can be an advantage, but they are not required

You have a TOYOTA DNA, this means

• Courage: you are ready to let go of the easy path to reach challenging targets.
• Collaboration: you are a team player, respectful and inclusive in your style, and you take a customer-oriented approach.
• Creativity: your passion drives you to explore innovative ideas and challenge the impossible.
• Curiosity: you combine imagination and fact-based observation.
• Coaching: you share knowledge and feedback with your colleagues and celebrate each other’s success.

Oferujemy

• Sport subscription
• Training budget
• Private healthcare
• Lunch card
• Annual or Quarterly bonus
• Mindfulness and Stress Management Programme
• Employee Recommendation Programm
• Car leasing options
• No dress code
• Modern office
• Retirement savings scheme (PPK)