Lead IT Security Analyst (Cybersecurity) HSBCJP00053441

Job Title : Secure Development – Lead IT Security Analyst

Location : Kraków (preferred) or Warsaw – Hybrid (6 days per month in office)

Contract Type : B2B

Business Area : IT – Cybersecurity

Job Description :

We are seeking a Lead IT Security Analyst to join our global Cybersecurity team with a focus on Secure Development. This role involves analyzing and executing cybersecurity processes, controls, and standards related to application security. You will work closely with development teams, oversee security scanning activities, and collaborate with stakeholders to strengthen our defenses against cyber threats.

Key Responsibilities :

Lead cybersecurity scanning operations, ensuring comprehensive coverage of assets.

Design and operate additional scanning categories and provide analysis and reporting.

Support development teams with onboarding and troubleshooting of security scans.

Drive continuous improvement and adoption of security scanning tools and services.

Ensure compliance with internal audit and regulatory requirements.

Collaborate with cybersecurity teams, senior management, and business units on security issues.

Mentor junior team members and contribute to team capability building.

Requirements : Technical Skills :

Strong understanding of Software Development Life Cycle (SDLC) with emphasis on cybersecurity.

Experience with programming and scripting languages (JavaScript, Python, SQL).

Knowledge of web applications and microservices architectures (REST, SOAP) and security risks.

Familiarity with common web technologies and protocols (HTML, XML, JSON, REST).

Understanding of Common Vulnerability Scoring System (CVSS).

Experience with enterprise security scanning tools is an advantage.

Experience :

Minimum 4 years supporting application teams in security scanning tool onboarding, vulnerability review, and triage.

Proven ability to analyze vulnerabilities, manage false positives, and handle exceptions.

Bachelor’s degree or equivalent in IT Security or related field preferred.

Preferred Qualifications :

Professional certifications such as CEH, CISSP, GIAC, or Cloud Security certifications.

Awareness of emerging technologies and associated security threats.

To learn more about Antal, please visit www.antal.pl