Security Remediation Engineer

WHO ARE WE?

WE ARE A WORLD LEADER IN ENGINEERING AND IT SERVICES.

At ALTEN, we see our specialists as architects - today’s designers of tomorrow’s world.

As a leader in Engineering and IT Services, we support a company in their technological and sustainable transformation.

OVER 57,400 EMPLOYEES IN 30+ COUNTRIES, TO SUPPORT MORE THAN 6,500 CLIENTS WORLDWIDE.

We operate in all sectors: Aeronautics, Space, Defence, Security & Naval, Automotive, Rail & Mobility, Energy & Environment, Life Sciences & Health, Industrial Equipment & Electronics, Telecoms, Banking, Finance & Insurance, Retail, Services & Medias, Public Services & Government.

We carry out complex and highly technical projects throughout the value chain of the most prestigious companies worldwide.

Our motto: Building Tomorrow’s World Today!

This role focuses on building, scaling, and maintaining the IKP infrastructure to ensure reliability, performance, and scalability for internal customers worldwide.

Role description

• Own the vulnerability position and maintain a consolidated view of all open findings across CDN, WAF, hosting, CMS, and application layers.
• Triage incoming findings by validating, deduplicating, and assessing their exploitability, then assign priorities and remediation deadlines.
• Challenge false positives and overstated severity ratings with evidence to focus engineering efforts on high-risk areas.
• Drive remediation by translating findings into actionable tasks for platform, Akamai, Azure, and Sitecore engineers.
• Collaborate with team leads to schedule remediation within sprints and change windows without disrupting ongoing projects.
• Provide hands-on technical support for complex fixes, including WAF rule tuning, patching, dependency upgrades, and mitigation design.
• Track remediation progress and verify that fixes resolve the findings rather than just suppressing symptoms.
• Own the patching cadence and currency of the platform estate, including operating systems, runtimes, CMS, and third-party components.
• Plan and coordinate patching campaigns across regions and maintenance windows.
• Identify and reduce structural causes of recurring vulnerabilities, such as unsupported versions, unmanaged dependencies, and configuration drift.
• Produce reports on vulnerability and patching status for leadership and risk functions.
• Evidence remediation against internal security policy timescales and support audit and regulatory requests.
• Represent the platform in security governance forums, remediation reviews, and risk acceptance discussions.
• Escalate issues effectively when necessary.

Requirements

• 6-8 years of senior hands-on engineering experience (technical credibility with engineers is essential).
• Experience in vulnerability management or security remediation at scale in production environments.
• Working knowledge of web infrastructure, including CDN, WAF, TLS, DNS, HTTP security headers, and common web attack mitigations.
• Cloud platform experience, preferably with Azure (patching, configuration baselines, identity, and network controls).
• Ability to interpret, reproduce, and assess scanner findings within the architecture, not just relying on tool ratings.
• Familiarity with vulnerability scoring and prioritization frameworks and ability to articulate risk clearly for non-specialists.
• Proven ability to drive work through non-direct reports using influence, clarity, and follow-through.
• Strong written English and confidence working with stakeholders across multiple countries and time zones.
• Experience with WAF policies and security controls.
• Experience with Sitecore or comparable enterprise CMS.
• Scripting and automation skills (Python, PowerShell, or similar) for tooling integration and reporting.
• Familiarity with regulated financial services environments and operational resilience expectations.
• Relevant certification (e.g., CISSP, OSCP, Azure Security Engineer Associate) or comparable practical expertise.

We offer

• We offer a full-time employment contract
• Location - Kraków, work model - hybrid
• Stable and long-term cooperation
• Well-defined career path at the European leader in engineering & IT consulting
• Opportunity to relocate and work in different ALTEN Polska branches
• After project completion, opportunity to engage in subsequent projects within the company
• Introduction and cooperation with a dedicated Competences Manager

Benefits

• Medicover medical care
• Medicover dental care
• Medicover Benefits platform
• Medicover Sport card
• Referral Program
• Layette for a newborn employee’s child
• Group life insurance
• Pension scheme

We also offer cooperation based on a B2B or Contract of mandate (UZ).

We also guarantee

• Access to professional certifications with our technology partners (e.g., Google, ISTQB)
• Access to relevant industry events
• Access to the Knowledge Sharing Program
• Access to the Referral Program

Do not hesitate and join our team!

NOTICE: We kindly inform you that we will contact the selected people.