Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 12 hours agoWe saw it 18 min after it went up

Cybersecurity Consultant

Poland and Middle-Eastern Europe70 open roles

Where
Bulgaria; Romania
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowCybersecurity ConsultantPoland and Middle-Eastern Europe · Bulgaria; Romania

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Poland and Middle-Eastern Europe's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

9.4% of postings close within 7 days. Measured by our own scanner across the market. Poland and Middle-Eastern Europe postings stay open a median of 15 days.

Share of postings closed within
  1. 1.8%1 day
  2. 3.9%3 days
  3. 9.4%7 days
  4. 15.5%14 days
  5. 33.8%30 days
This job: posted 12 hours ago

Poland and Middle-Eastern Europe median: 15 days open

The posting

Xebia is a global AI-first, digital transformation, and engineering partner. With over 25 years of experience and a team of 5,000 professionals across 16 countries, we help organizations design and build scalable products, platforms, and data-driven solutions.

We specialize in Artificial Intelligence, Data and Cloud, Intelligent Automation, and Digital Products, combining deep technical expertise with a strong focus on engineering excellence and a people-first culture.

In the CEE region, we’re a team of nearly 1,000 experts delivering modern applications, data platforms, and AI solutions for clients such as McLaren, Aviva, Deloitte, Spotify, Disney, ING, UPS, Tesco, Truecaller, AllSaints, Volotea, Schmitz Cargobull, Allegro, InPost, and many, many more. We work with leading technologies including AWS, Azure, GCP, Databricks, and Snowflake, and combine strong engineering culture with a consulting mindset and a continuous focus on growth and knowledge sharing.

About project:

We are looking for an Information Security Consultant to join an engagement with our international client, who is strengthening its information security across engineering, IT, and compliance functions.

The project focuses on improving security visibility and control across the organization, including establishing a complete inventory of APIs and endpoints, implementing an access matrix for users and applications, strengthening identity and access management, and closing gaps in vulnerability management and CI/CD security.

Reporting to the IT Security Manager, you will take a hands-on, delivery-focused approach to implementing security controls, documenting processes, and supporting knowledge transfer. You will work closely with multiple technical teams and stakeholders, with a high degree of autonomy in technical decision-making.

You will be:

  • hardening CI/CD pipelines by enforcing least-privilege access, isolating build environments, and managing pipeline configurations as code,
  • integrating and tuning security gates for SAST, SCA, dependency scanning, secret detection, container images, and infrastructure-as-code,
  • implementing secure secrets management, credential rotation, and appropriate segregation of CI/CD credentials,
  • strengthening software supply-chain security through artifact signing, SBOM generation, dependency pinning, and trusted registries,
  • enforcing source-control and release security controls, including branch protection, mandatory reviews, and protected release workflows,
  • building and maintaining an authoritative inventory of APIs, endpoints, and supporting infrastructure, including ownership, classification, exposure, and lifecycle status,
  • mapping assets against applicable security controls, including authentication, authorization, encryption, logging, monitoring, and rate limiting,
  • establishing processes for registering new assets and periodically reviewing inventory accuracy and coverage,
  • designing and documenting an access matrix for human users, service accounts, API clients, integrations, and automated jobs,
  • applying least-privilege and segregation-of-duties principles to access assignments and defining appropriate permission scopes for application-to-application access,
  • strengthening identity and access management, including enforcing Single Sign-On (SSO) wherever technically feasible,
  • onboarding identified assets and endpoints into Qualys, organizing assets by risk and validating scan coverage against the complete inventory,
  • coordinating vulnerability triage and remediation in line with severity thresholds, remediation SLAs, and reporting requirements,
  • documenting security controls, procedures, findings, and recommendations in English,
  • collaborating with engineering, IT, and compliance stakeholders to implement security improvements and support knowledge transfer.

Your profile:

  • proven experience in information security, IT security, or product security within complex technical environments,
  • hands-on experience with security asset management, including building and maintaining asset inventories,
  • practical experience with SAST and DAST and integrating security testing into software delivery workflows,
  • working knowledge of API security, including the OWASP API Security Top 10, authentication and authorization models, and encryption standards,
  • experience designing and documenting access control models, including RBAC and access matrices,
  • understanding of IAM principles, SSO, least-privilege access, and service-account security,
  • experience with vulnerability management processes, including asset onboarding, scan coverage, risk-based prioritization, and remediation tracking,
  • familiarity with information security and compliance frameworks such as ISO 27001, NIS2, or SOC 2,
  • strong technical documentation skills and the ability to translate security requirements into clear, actionable procedures,
  • strong communication skills and the ability to collaborate with both technical and business stakeholders,
  • a hands-on, delivery-oriented mindset, with the autonomy to drive tasks forward and solve problems proactively,
  • professional fluency in English, as all documentation and deliverables will be in English.
  • Practical experience using AI-powered assistants (e.g. Claude Code, GitHub Copilot, Cursor) to improve productivity, quality, or decision-making in software delivery.
  • Work from the European Union region and a work permit are required.

Nice to have:

  • familiarity with cloud environments, particularly AWS,
  • experience with GitHub and securing source-control and CI/CD workflows,
  • experience with vulnerability management platforms such as Qualys,
  • familiarity with identity providers and SSO platforms such as Okta or Microsoft Entra ID,
  • experience with software supply-chain security, including SBOMs, artifact signing, and dependency security,
  • experience working across multiple product and engineering teams in an international organization.
  • Location: Bucharest, Romania,
  • Work mode: Hybrid, with 3 days per week on-site,

Recruitment Process:

CV review – HR call – Interview – Client Interview – Decision

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Poland and Middle-Eastern Europe's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Poland and Middle-Eastern Europe's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Poland and Middle-Eastern Europe's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.