Senior Security Specialist IAMThe security architect provides expert guidance for addressing current security issues but has the foresight to see where the industry is headed and proactively deliver optimal secure solutions. The architect is expected to think like an adversary and identify how solutions should evolve as the threat landscape changes. A senior tech-level role, the architect possesses strong communication and organizational skills, and the ability to guide less experienced coworkers. The architect provides technical leadership to delivery and solution design team members and advises executive leadership regarding matters of significant importance to the organization.<h2>Task and accountabilities</h2><ul><li>Remain current with new security threats and assess systems to ensure they can defend the business.</li><li>Conduct threat modelling and architectural assessments of applications to encompass all aspects of information security, ensuring security by design.</li><li>Document identified threats and provide corresponding mitigation strategies.</li><li>Evaluate technologies and solutions to enhance security capabilities.</li><li>Identify security gaps and communicate associated business risks to relevant stakeholders.</li><li>Provide solutions aligned with business needs, considering security and compliance requirements.</li><li>Verify the effectiveness of security controls in mitigating identified risks.</li><li>Assist engineering projects throughout the Secure Software Development Life Cycle (SSDLC) and collaborate to effectively prioritize product security elements.</li></ul><h2>Technical Skill:</h2><ul><li>5-10 years of experience in IT or IT Security</li><li>Strong knowledge of information security principles, security architectures, frameworks, standards, and emerging threats, with the ability to implement effective mitigation strategies.</li><li>Deep understanding of network protocols, operating systems, databases, applied cryptography, least privilege, zero trust principles, identity &amp; access management, and other core information security concepts.</li><li>Familiarity with regulatory requirements and compliance standards (NIST, ISO 27001, GDPR, SOC2).</li><li>Expertise in cloud computing and its associated best security practices, covering applications, infrastructure, storage, platforms, and data security.</li><li>Hands-on experience in performing threat modelling for applications, identifying threats, and suggesting optimal mitigation strategies.</li><li>Strong understanding of threat modelling methodologies (e.g., STRIDE, DREAD, PASTA).</li><li>Proficiency in using threat modelling tools (e.g., Microsoft Threat Modelling Tool, Threat Modeler, OWASP Threat Dragon).</li><li>In-depth knowledge of common security vulnerabilities (e.g., OWASP Top Ten, CVEs) and attack vectors.</li><li>Must have experience in architecting and securing Cloud Computing Platforms such as Azure or AWS.</li><li>Demonstrate a deep understanding of Google Cloud Platform(GCP) concepts and architectures, with a focus for how security controls are applied to cloud-based technologies. Architecture &amp; Networking , Identity &amp; Access Management, Securing the CI/CD Pipeline, Secrets and Data Protection, logging and monitoring and Security controls for Containers(e.g., Dockers, Kubernetes).</li><li>Excellent communication and interpersonal skills, with the ability to interact with stakeholders at all levels and explain complex security concepts in an easily understandable manner.</li><li>Constantly research capabilities of current and new disruptive solutions on the market and make recommendations to security leadership.</li><li>Drive security efficiencies, enabling security team members to work on more advanced tasks.</li><li>Perform engineering performance testing to stress the limitations of security solutions while at the same time ensuring business innovation and day-to-day processes are not negatively impacted.</li><li>Experience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, private and hybrid environments.</li></ul>Other qualifications:<ul><li>Extensive knowledge of traditional security controls and technologies, such as Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (IDAM) systems, antivirus and firewalls, in addition to newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls.</li></ul>Competences required:<ul><li>Analytical and problem-solving skills</li><li>Ability to work in cross functional teams, including remote and external resources</li><li>Ability to effectively communicate with technical resources</li><li>Works with minimal guidance and recognitions when guidance needed</li><li>Ability to understand and develop enterprise policy and technical standards with specific regard to data loss protection and secure configuration</li><li>Ability and willingness to learn new things about data loss protection management, exploits, hacker techniques, and overall security operations</li></ul>We offer:<ul><li>Being part of a fast-growing, dynamic company, recognized as one of the foremost global packaging manufacturers.</li><li>Great professional growth opportunities.</li><li>Annual bonus.</li><li>Private medical care &amp; insurance plan for you to keep an eye on your health.</li><li>MyBenefit program.</li><li>Flexible and hybrid work arrangement: We offer a flexible hybrid work model – 2 days a week in the Krakow office, or fully remote if you're located elsewhere.</li><li>Parking space for all employees.</li><li>Comfortable working environment (library, relaxation area with a view of the Wawel castle and city center, casual dress code).</li></ul>If you are a current CANPACK employee, please apply through your <a href="http://workday.canpack.com">Workday account</a>.CANPACK Group is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, disability, or any other characteristic protected by law or not related to job requirements, unless such distinction is required by law.

<div class="org-about-module-wrapper org-about-module__card-spacing" tabindex="-1" data-artdeco-is-focused="true">
<div>
<div class="org-about-module__description">
<div id="ember58" class="ember-view organization-about-module__content-consistant-cards-description">We&rsquo;re CANPACK Group &ndash; 8,000 people around the world, with a common goal to push the boundaries of packaging and help our customers dream and deliver on a global scale. Our company began in Poland over 30 years ago, and since then we&rsquo;ve grown into a leading global manufacturer of beverage packaging. Every day, we produce millions of beverage cans, food tins, glass bottles and metal closures at our production sites located on five continents. We create impactful, sustainable solutions that do more &ndash; for brands, for businesses, for people and the planet. We achieve this through empowering every employee to make their mark by sharing ideas and solving problems together. Join us and be part of a collaborative culture that cares about its employees and respects the world around it. Join us and help us Create That Feeling. </div>
</div>
</div>
</div>

Senior Security Specialist IAM

Senior Security Specialist IAMThe security architect provides expert guidance for addressing current security issues but has the foresight to see where the industry is headed and proactively deliver optimal secure solutions. The architect is expected to think like an adversary and identify how solutions should evolve as the threat landscape changes. A senior tech-level role, the architect possesses strong communication and organizational skills, and the ability to guide less experienced coworkers. The architect provides technical leadership to delivery and solution design team members and advises executive leadership regarding matters of significant importance to the organization.<h2>Task and accountabilities</h2><ul><li>Remain current with new security threats and assess systems to ensure they can defend the business.</li><li>Conduct threat modelling and architectural assessments of applications to encompass all aspects of information security, ensuring security by design.</li><li>Document identified threats and provide corresponding mitigation strategies.</li><li>Evaluate technologies and solutions to enhance security capabilities.</li><li>Identify security gaps and communicate associated business risks to relevant stakeholders.</li><li>Provide solutions aligned with business needs, considering security and compliance requirements.</li><li>Verify the effectiveness of security controls in mitigating identified risks.</li><li>Assist engineering projects throughout the Secure Software Development Life Cycle (SSDLC) and collaborate to effectively prioritize product security elements.</li></ul><h2>Technical Skill:</h2><ul><li>5-10 years of experience in IT or IT Security</li><li>Strong knowledge of information security principles, security architectures, frameworks, standards, and emerging threats, with the ability to implement effective mitigation strategies.</li><li>Deep understanding of network protocols, operating systems, databases, applied cryptography, least privilege, zero trust principles, identity &amp; access management, and other core information security concepts.</li><li>Familiarity with regulatory requirements and compliance standards (NIST, ISO 27001, GDPR, SOC2).</li><li>Expertise in cloud computing and its associated best security practices, covering applications, infrastructure, storage, platforms, and data security.</li><li>Hands-on experience in performing threat modelling for applications, identifying threats, and suggesting optimal mitigation strategies.</li><li>Strong understanding of threat modelling methodologies (e.g., STRIDE, DREAD, PASTA).</li><li>Proficiency in using threat modelling tools (e.g., Microsoft Threat Modelling Tool, Threat Modeler, OWASP Threat Dragon).</li><li>In-depth knowledge of common security vulnerabilities (e.g., OWASP Top Ten, CVEs) and attack vectors.</li><li>Must have experience in architecting and securing Cloud Computing Platforms such as Azure or AWS.</li><li>Demonstrate a deep understanding of Google Cloud Platform(GCP) concepts and architectures, with a focus for how security controls are applied to cloud-based technologies. Architecture &amp; Networking , Identity &amp; Access Management, Securing the CI/CD Pipeline, Secrets and Data Protection, logging and monitoring and Security controls for Containers(e.g., Dockers, Kubernetes).</li><li>Excellent communication and interpersonal skills, with the ability to interact with stakeholders at all levels and explain complex security concepts in an easily understandable manner.</li><li>Constantly research capabilities of current and new disruptive solutions on the market and make recommendations to security leadership.</li><li>Drive security efficiencies, enabling security team members to work on more advanced tasks.</li><li>Perform engineering performance testing to stress the limitations of security solutions while at the same time ensuring business innovation and day-to-day processes are not negatively impacted.</li><li>Experience in cloud computing technologies, including software-, infrastructure and platform-as-a-service, as well as public, private and hybrid environments.</li></ul>Other qualifications:<ul><li>Extensive knowledge of traditional security controls and technologies, such as Security Information and Event Management (SIEM) systems, intrusion detection/prevention systems (IDS/IPS), public key infrastructure (PKI), identity and access management (IDAM) systems, antivirus and firewalls, in addition to newer offerings such as endpoint detection and response (EDR), threat intelligence platforms, security automation and orchestration, deception technologies and application controls.</li></ul>Competences required:<ul><li>Analytical and problem-solving skills</li><li>Ability to work in cross functional teams, including remote and external resources</li><li>Ability to effectively communicate with technical resources</li><li>Works with minimal guidance and recognitions when guidance needed</li><li>Ability to understand and develop enterprise policy and technical standards with specific regard to data loss protection and secure configuration</li><li>Ability and willingness to learn new things about data loss protection management, exploits, hacker techniques, and overall security operations</li></ul>We offer:<ul><li>Being part of a fast-growing, dynamic company, recognized as one of the foremost global packaging manufacturers.</li><li>Great professional growth opportunities.</li><li>Annual bonus.</li><li>Private medical care &amp; insurance plan for you to keep an eye on your health.</li><li>MyBenefit program.</li><li>Flexible and hybrid work arrangement: We offer a flexible hybrid work model – 2 days a week in the Krakow office, or fully remote if you're located elsewhere.</li><li>Parking space for all employees.</li><li>Comfortable working environment (library, relaxation area with a view of the Wawel castle and city center, casual dress code).</li></ul>If you are a current CANPACK employee, please apply through your <a href="http://workday.canpack.com">Workday account</a>.CANPACK Group is an Equal Opportunity Employer and all qualified applicants will receive consideration for employment without regard to race, colour, religion, age, sex, sexual orientation, gender identity, national origin, disability, or any other characteristic protected by law or not related to job requirements, unless such distinction is required by law.

Senior Security Specialist IAM

About the Job

About the Company

CANPACK Recycling

Similar Jobs

Senior Security Engineer

Senior Security Engineer

Security Engineer

Security Engineer

SPR Security Operations Lead

SPR Security Operations Lead

Senior Application Security Engineer (Hybrid - US)

Senior Application Security Engineer (Hybrid - US)

Senior Manager, Product and Application Security

Senior Manager, Product and Application Security

Senior Global IT Security Specialist

Senior Global IT Security Specialist

Global IT Security Specialist

Global IT Security Specialist

Staff Security Engineer (Data Specialist)

Staff Security Engineer (Data Specialist)

Principal Application Security Engineer - Cumulus Systems Pvt. Ltd.

Principal Application Security Engineer - Cumulus Systems Pvt. Ltd.

Senior Application Security Engineer - Cumulus Systems Pvt. Ltd.

Senior Application Security Engineer - Cumulus Systems Pvt. Ltd.