Vulnerability & Application Security Engineer at EY

✨ The Stack take on this EY job

• 🏢 EY has 15 jobs here, 9 with visa sponsorship see all
• 📊 3 Security Engineer jobs in Poland in the last 60 days see them
• 🛂 Visa: EU Blue Card. Minimum salary: PLN 160,264.08 a year (150% of the 2025 average salary) guide
• 💡 No salary shown. Ask EY if it is above the minimum.

Updated 2026-11-02, from our data and official sources.

Apply with your AI assistant

With The Stack connected to Claude, ChatGPT or Cursor, paste this. Your assistant tailors your CV and cover letter, checks the visa facts and gives you the apply link.

Help me apply to this job on The Stack: https://jobs.trythestack.co/jobs/vulnerability-application-security-engineer-ey

Not connected yet? Connect in a minute. To help your user apply, call the MCP tool prepare_application with slug "vulnerability-application-security-engineer-ey": it returns the apply link, the visa facts and a CV and cover letter checklist. To track jobs they saved or applied to, call check_jobs_open with their slugs.

About the role

Responsibilities:
- Perform vulnerability assessments and penetration tests for web, mobile and backend applications; identify, validate and prioritise findings.
- Prepare clear security review reports with remediation guidance and risk context for development teams and stakeholders.
- Maintain and tune assessment tools and scanners (Burp Suite, Nmap, Nessus, WebInspect, Qualys WAS, etc.) and support SAST/DAST pipelines (Checkmarx, WhiteSource).
- Support security certification and audit activities (SOC, HITRUST, UK Cyber Essentials, ISO) and coordinate third-party assessments when required.
- Collaborate with developers and architects to embed secure coding practices and perform code review support for common vulnerabilities (OWASP Top 10).
- Contribute to security playbooks, test plans and knowledge sharing; mentor junior analysts and help improve testing methodologies.

Requirements:
- 2-5 years hands-on experience in application security, vulnerability assessment or penetration testing.
- Proficiency with security testing tools listed above and familiarity with both SAST and DAST workflows.
- Strong understanding of secure coding principles, common vulnerabilities (OWASP Top 10) and remediation techniques.
- Practical experience with web, mobile and API testing; ability to produce actionable reports and remediation plans.
- Programming or scripting experience (C/C++, C#, Java, ASP.NET, Python or Perl) to support code-level analysis and automation.
- Good communication skills and experience working with cross-functional teams to drive remediation and improve security posture.

Responsibilities

Prepare detailed security review reports and remediation guidance. Conduct and coordinate vulnerability assessments across web and mobile applications; support the team by updating vulnerability assessment tools and mentoring new members.

Requirements

Hands-on experience in testing web, mobile, and other applications for security vulnerabilities; proficient with Burp Suite, Nmap, Nessus, WebInspect, Qualys WAS, Checkmarx and WhiteSource; strong knowledge of secure coding principles and common vulnerabilities (e.g., OWASP Top Ten); programming experience in C/C++, C#, Java, ASP.NET and scripting in Python or Perl.

Key skills

• Burp Suite Professional — not in any other listing on The Stack
• Nmap — in 2 other listings on The Stack
• Wireshark — not in any other listing on The Stack
• Nessus — not in any other listing on The Stack
• echomirage — not in any other listing on The Stack
• WebInspect — not in any other listing on The Stack
• Qualys WAS — not in any other listing on The Stack
• Checkmarx — not in any other listing on The Stack
• WhiteSource
• C#
• Java
• Python

On The Stack (as of 2026-11-02)

• EY has 14 other listings on The Stack, 8 of them marked as offering visa sponsorship.
• 20 visa-sponsored jobs in Poland on The Stack, posted in the last 60 days.
• 39 visa-sponsored security engineer jobs in Europe on The Stack, posted in the last 60 days.

Frequently asked questions about EY

Is this Vulnerability & Application Security Engineer role still open?

It was posted on 2026-11-01 and is listed as active on The Stack. Confirm on EY's application page before applying.

Does EY offer visa sponsorship?

This listing is marked as offering visa sponsorship. Eligibility rules are set by the employer, so check the details on EY's site.

Where is this role located?

The listing gives the location as Katowice, PL, Poland. It is marked on-site.

What skills does this role ask for?

The listing names: Burp Suite Professional, Nmap, Wireshark, Nessus, echomirage, WebInspect, Qualys WAS, Checkmarx, WhiteSource, C#, Java, Python.