Overview
We are SoftwareMill - a group of various individuals: total geeks, humanists, fans of fantasy and karate, Apple and Android enthusiasts. Both our differences and shared values allow us to create one of the most employee-friendly companies in the IT industry. We work 100% remotely, from our homes scattered all over Poland (but not only!).
Interested in joining our team? See what it takes to become a SoftwareMiller!
We’re looking to expand our team with a brand new position, security specialist. You’ll have the opportunity to codify the security policies, oversee their implementation, propose necessary training for other team members and participate in securing the applications that we implement for our clients.
So far we shared the above responsibilities among multiple people, but as we grow, we feel that it’s time for a dedicated person to take the reins.
We’ve gathered some rough areas we feel should be addressed, but your primary task will be to build a security culture in our organisation. You’ll be working mostly with our engineers, so apart from technical skills, soft skills will be needed as well. Let’s be honest: introducing security measures in a mostly IT-conscious crowd might at times be challenging.
Our offer
- Salary ranging from 900 to 1400 PLN net per day for start
- 100% remote company with a remote-first mindset
- Full-time but not necessarily 9-17, we are flexible
- Professional development and freedom in choosing the toolset and tech stack
- Learning-culture expressed by SoftwareMill Academy and the technical reading club
- Small teams without PMs, no procedures, and no other corporate 'goodies' we all love
- Best tools you need to make your work pleasurable and effective: monitor(s), workstation of your choice
- IT-friendly environment with passionate and skilled people who believe in clean code and software craftsmanship - you will have a chance to meet some of them during the recruitment process
- Interesting projects with technologies like Scala, Java, GCP, AWS, Azure with Kubernetes and other DevOps tools
Your responsibilities
- auditing our internal infrastructure and our client's infrastructure for security vulnerabilities
- specifying and implementing recommended security practices both internal and in client projects
- implementing tools needed to ensure security compliance
- securing our internal toolchain, defining recovery procedures and running drills
- codifying internal security procedures
- staying up to date with current security trends and new vulnerabilities
- participating in the tendering process, helping understand and estimate security-related requirements
- working with our team to build common understanding and foundations for introducing security measures
- discussing security requirements with our clients
- consulting with our development teams on best security practices
- taking part in building secure software delivery pipelines, especially in the area of dependency management
- leading us through certifications that are valuable from a business perspective
Our goal is to build a security culture that’s way beyond “industry standards”, at the same time remaining pragmatic and practical. We only want to introduce security regulations because they are needed, not because they look good. What adds to the challenge: we’re remote from the day the company was created. This means that we’ll have to face the unique challenges of a modern remote workplace.
What we expect
- Very good knowledge of IT security and risk management domain
- At least 3 years of commercial experience in security area
- Experience with audits, security certification processes and compliance platforms
- Understanding of the wide set of security challenges in a remote organisation
- Very good communication and people skills to introduce security measures among the team members
- Ability to write down succinct, easy to follow procedures
- Analytical skills with strong problem solving capabilities, sometimes with out of the box approach
- Strong organisational skills with ability to prioritise tasks
- Good knowledge of English is a must (both spoken and written), we work with clients from all over the world (USA, Australia, Switzerland, etc.)
- Polish language is required, as internally we are a Polish speaking company
Nice to have
- Security/risk management trainings and certificates
- Prior experience in cooperation with software consultancy / software house companies
- Practical knowledge of introducing and implementing security in server-side software
- Experience in architecture of IT systems in security-sensitive domains

Impact from day one

You can directly influence the company’s future. Our leaders are not appointed but chosen by their actions.

Pay transparency

You can feel appreciated for your extra input and clearly see what skills are rewarded.

Transparent raises policy

You are empowered to explore and co-create your own development path within a custom, developers-friendly promotion system.

Quality time together

We foster true connections. You enjoy monthly integrations full of fun activities for the whole team.

Company getaways

Twice a year, it’s time for a weekend away. To one of these fun-filled escapes, we bring our loved ones.

Conferences refund

You get a 50% refund, and 100% if you are a speaker, for conference tickets and workshop attendance.

Paid days off

You get time and resources to grow, and you’re paid when attending workshops and IT conferences.

Workstation of your choice

Only you know what type of laptop, software, or accessories can make your coding joy, so you choose it.

Free English classes

Feel more confident when communicating in your projects after attending our internal fun English classes.

Multisport card

Break a sweat and increase your energy levels at your favorite gym any time you want.

Health priorities

Do a routine health check up once a year and get a refund. Take part in sport tournaments with your colleagues.

Gamified content days

Share your technical knowledge on a conference or our blog to win prizes in a gamified tournament.

Bottom up structure

Our leaders are not appointed but chosen by their teammates. Everybody can contribute to how SoftwareMill operates.

Knowledge transfer

We learn together for certificates, do architecture katas, read technical books, or simply help each other on a daily basis.

Soft skills development

We’ve learned that soft skills are essential and help us work better. There is always some soft skill initiative open to join.

Hard skills development

Attend internal workshops by top-notch IT experts that will help you grow as a developer.

100% remote forever

You’ll find out that remote does not mean alone. Remote-first from day 1, we’ve created a setup that enhances our daily work.

Work-life balance

You’re free to organize your workday around important family matters or other obligations if necessary.

Team integration budget

Want to meet with your project team onsite? No problem, you’ll get a budget for spending quality time together.

Absolute transparency

You have access to all information, including finances, necessary to contribute to strategic decisions.

Send resume and fill online form

No surprises here ;) Contact us and then we will ask you to fill a short questionnaire to learn more about your motives and expectations.

Video Call

Let's chat! We'll tell you more about us, the process, the team, and discuss your expectations. We will speak English a bit, too.

Technical task and code review

Coding in practice - that's what the job is all about. Afterwards, you'll get thourough feedback on your code. Always, we promise!

Technical interview

A good chance to discuss your coding task in more detail and talk about your experience in our industry.

Lunch meeting

Let's have lunch and make sure we would like to work together in a team.

Remote

We all work from our homes, co-working offices, or sometimes even from the Bieszczady Mountains. Remote-first from day 1, we've been become experts in distributed workplace best practices.

Bottom-up structure

Everyone has the same right to voice their opinions or change the way the company works, no matter if you are a boss or a developer who joined us a month ago.

Transparency

You will know how much each of us earns or how much we spend on various things. We practice full transparency — both decision-making and financial.

Self-improvement

You get paid days off when you attend conferences. We also appreciate when you want to share your knowledge with others at internal knowledge sharing initiatives.

Needs understood

We're a company launched and led by active developers, so we understand that an SSD disc is not a whim and two large external LCD displays setup is not too much. If you need any stuff to work, you will get it.

Great Team

Skills do not tell the whole story. Values play a crucial part in who we are, what we give back to the community, and who we invite on a journey with us.

Still have questions?

Catch us on the dedicated Ask Me Anything - SoftwareMill Slack channel and ask us anything about programming, projects, the company, or remote work tips.