Skip to content

Open nowPosted 47 days ago

HSBCJP00058693 (Cybersecurity) Threat and Controls Assessment Consultant

antalpl1,061 open roles

Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowHSBCJP00058693 (Cybersecurity) Threat and Controls Assessment Consultantantalpl
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on antalpl's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. antalpl postings stay open a median of 2 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.3%14 days
  5. 35.6%30 days
  6. 58.1%60 days
This job: posted 47 days ago

antalpl median: 2 days open

The posting

Threat and Controls Assessment Consultant

Location: Kraków, Poland

Work model: Hybrid – 6 days per month from the Kraków office

Contract: B2B

About the role

We are looking for a Senior Cybersecurity Threat Analyst to join a global cybersecurity environment and play a key role in identifying security threats, assessing controls and helping technology teams build secure solutions.

In this role, you will focus on threat modelling, security assessments and identifying vulnerabilities and control gaps across a diverse technology landscape, including applications, databases, networks, infrastructure and cloud environments.

You will work closely with developers, architects, technical leads and business stakeholders, translating technical security findings into clear business risks and practical recommendations.

This is a hands-on role for someone who combines a strong technical cybersecurity background with excellent analytical and communication skills.

What you will do

  • Perform threat modelling and threat & control assessments for technology services and solutions across on-premise, cloud and external environments.
  • Identify potential security threats, vulnerabilities and control gaps across applications, databases, networks and infrastructure.
  • Work closely with developers, architects and technical leads to understand end-to-end solutions and identify security risks.
  • Assess existing security controls and recommend appropriate improvements.
  • Translate technical security findings into clear and actionable business risks and recommendations.
  • Provide security input throughout the software development lifecycle (SDLC), from design through implementation and support.
  • Contribute to the design and development of technology solutions by providing practical security recommendations.
  • Evaluate security implications of new technologies, products and solutions and provide technical recommendations.
  • Collaborate with cybersecurity and technology stakeholders to investigate and address potential security issues.
  • Contribute to the continuous improvement of security assessment processes, methodologies and tools.
  • Keep up to date with emerging technologies, cybersecurity threats, industry trends and best practices.
  • Support a collaborative, international environment and contribute to knowledge sharing across the wider cybersecurity community.

What we are looking for

Cybersecurity & risk expertise

  • Several years of professional experience in cybersecurity, information security or a related technology field.
  • Hands-on experience with threat modelling and security assessments.
  • Strong understanding of cybersecurity concepts, principles and best practices.
  • Good understanding of risk and control management.
  • Ability to identify and assess threats, vulnerabilities and control weaknesses.
  • Experience translating technical security issues into business risks and practical recommendations.
  • Experience with security assessment of complex enterprise technology environments.

Strong technical background

  • Good understanding of application design and architecture.
  • Knowledge of application, network and host security.
  • Good understanding of cloud security and practical experience with at least one major cloud platform: AWS, Azure or GCP.
  • Strong understanding of the Software Development Lifecycle (SDLC), with a focus on security.
  • Understanding of modern Generative AI and Agentic AI systems and their associated security risks.
  • Good understanding of emerging technologies and related cybersecurity threats.
  • Experience with security processes, methodologies and continuous improvement.

Communication & stakeholder management

  • Strong communication skills and the ability to work effectively with both technical and non-technical stakeholders.
  • Ability to explain complex security topics in a clear and business-oriented way.
  • Experience working in international and multicultural environments.
  • Strong stakeholder management skills and the ability to influence and provide recommendations.
  • Ability to work independently while also being an effective team player.
  • Strong analytical, problem-solving and decision-making skills.
  • Comfortable working in a fast-paced environment where priorities and requirements may change.

Certifications

Industry-recognised cybersecurity certifications are an advantage, such as:

  • CISSP
  • CISM
  • CRISC
  • Cloud Security certifications

What we offer

  • B2B contract
  • Hybrid work model – 6 days per month from the Kraków office
  • Lux Med private medical care
  • MyBenefit cafeteria
  • Dedicated support from a Contractor Care Specialist
  • Opportunity to work on complex, international cybersecurity initiatives
  • Exposure to modern technologies, cloud environments and emerging AI security challenges
  • A collaborative environment with opportunities for professional development
From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against antalpl's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on antalpl's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    antalpl's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.