Cybersecurity Architect - Security Tech Tribe @ T-Mobile Polska

• A higher education in computer science, telecommunications, cybersecurity or related fields.
• Minimum 5 years of experience in IT security, including at least 2 years as a security architect.
• Experience in designing and implementing security architecture in complex environments (e.g. on-prem, private cloud, public cloud, DevSecOps).
• Very good knowledge of areas: computer networks, cryptography, application security, data protection, systems: SIEM/SOAR, DLP, EDR/XDR, NDR.
• Knowledge of security architectures in cloud environments (AWS, Azure, GCP).
• Ability to assess risk and design solutions reducing these risks.
• Knowledge of standards and best practices: ISO/IEC 27001, NIST, CIS Controls, OWASP Top Ten, Mitre Att@ck & D3fense, TOGAF, SABSA (highly desirable).
• Knowledge of legal regulations: RODO, KRI, DORA, NIS2, KSC.
• Knowledge of security tools: Zscaler, Palo Alto, Fortinet, Splunk, Open Search, Microsoft Defender, Sentinel, CrowdStrike, Tenable, Cybereason, CyberArk, One Identity, etc.
• Ability to model architecture using e.g. Enterprise Architect, Draw.io, ArchiMate, Visio.
• Knowledge of UML, BPMN2
• Able to translate complex technical issues into business language and vice versa.
• Ability to work with various stakeholders (IT, business, management, audit, suppliers).

Mile widziane:

• Experience in creating security policies and architectural standards.
• Knowledge of zero-trust architecture and approaches like security by design.
• Experience in evaluating security solutions and creating requirements for them (PoC, RFP, due diligence).
• Participation in transformation projects (e.g. cloud migrations, SOC modernization).
• Certifications: CISSP, CCSP, CISM, CISA, CEH, OSCP, SABSA, TOGAF.

T-Mobile Polska is a leader in the telecommunications industry, providing innovative solutions that drive growth and efficiency for our customers. Our commitment to security and integrity is at the forefront of our activities.

As Cybersecurity Architect, you will play a key role in securing our systems and data at T-Mobile. You will closely collaborate with our IT, Cloud, and software development teams to ensure robust security measures and protect our applications and infrastructure from current and emerging threats. Your broad knowledge on cybersecurity topics combined with understanding of application and cloud security will be essential for this role.

, [Designing, developing, and overseeing the architecture of cyber security for IT systems, clouds (Azure, AWS), networks, and applications., Developing standards and architectural patterns for security., Ensuring compliance with regulations (e.g. RODO, ISO 27001, NIS2, PCI-DSS)., Participating in system architecture reviews from a security perspective., Identifying threats, vulnerabilities, and risks in IT projects and recommending remedial measures., Collaborating with DevOps, IT, and business teams to integrate security principles (DevSecOps)., Selecting and designing solutions from the scope of:, identity management (IAM, PAM), data protection (DLP, encryption), network security (firewalls, VPN, WAF), SIEM/SOAR, EDR/XDR., Coordinating security testing (penetration, red team, threat modeling)., Creating and updating IT security policies., Ensuring architecture compliance with audit and regulatory requirements., Supporting the SOC/CERT team in incident analysis requiring architectural analysis.]