Hi there!

We are Tooploox, an AI software development company offering custom AI solutions and services. We help innovative companies and startups design and build digital products with generative AI, mobile, and web technologies.

Our team, consisting of nearly 200 experts including our R&D team of over 40 engineers, many with PhDs, has pioneered AI solutions across industries like healthcare, fashion, and e-commerce. We’ve published over 15 research papers in top conferences like NeurIPS and ICML.

We are looking for an IT Security Specialist to join our team and help protect the data and technology infrastructure within the company. If you are passionate about cybersecurity and want to participate in ambitious projects, this might be the ideal role for you!

Feel invited!

What you will do:

• Developing and implementing security strategies – Creating policies and procedures to protect IT systems from external and internal threats;
• Threat monitoring and analysis – Regular system checks, identifying, and addressing potential security gaps;
• Incident response – Acting swiftly and effectively in the event of security breaches, analyzing incidents, and implementing corrective actions;
• Conducting security audits – Evaluating current systems and procedures, identifying weaknesses, and making improvements;
• Employee training – Raising team awareness on security issues through workshops and training sessions;
• Collaboration with IT teams – Working closely with developers to implement security measures at each stage of software development;
• Regulatory compliance – Ensuring that all systems and procedures meet the latest industry standards, including ISO/IEC 27001.

Experience and skills you need to join us:

• A technical university degree (IT, cybersecurity, or related field);
• Minimum 3 years of experience in a similar role within the IT industry;
• Knowledge of IT security systems, such as firewalls, encryption tools, intrusion detection systems, monitoring, and incident management;
• Experience with ISO/IEC 27001 certification, including conducting internal audits and participating in external audits;
• Certifications such as CISSP, CISM, CISA, SOC2 - nice to have;
• Strong analytical skills and problem-solving abilities related to information security;
• Ability to work well in a team and communicate effectively with both technical and non-technical stakeholders;
• Fluency in Polish and English.