• Lead security architecture reviews for new and existing applications, ensuring secure-by-design principles are embedded from initial design through deployment and ongoing operation. • Develop, enforce, and continuously refine secure coding standards across engineering teams through a combination of automated security scans (SAST, DAST, SCA), AI-assisted code review using tools such as Claude Code, periodic manual code audits, and targeted secure development training. • Own the design, implementation, and evolution of Application Security Posture Management (ASPM) capabilities, integrating signals from static analysis, dynamic testing, software composition analysis, and runtime telemetry to build risk-scoring models that balance exploitability, data sensitivity, and business impact. • Continuously improve threat modeling frameworks across application components, third-party integrations, cloud-native architectures, and AI/LLM-powered features, leveraging tools such as Claude Security for accelerated threat model generation and scenario analysis. • Develop custom security automation tools and scripts to improve detection and response capabilities across cloud environments, including AI-assisted vulnerability auto-fix workflows and integration of AI-powered security tooling into CI/CD pipelines. • Own and operate the company’s bug bounty program end-to-end: define program strategy and scope, triage and validate external researcher submissions, assess severity, and maintain productive engagement with the security research community. • Manage vulnerability triage and prioritization processes, ensuring vulnerabilities are assessed based on exploitability, business impact, and compliance requirements, and that remediation timelines align with organizational risk tolerance.

Role Description Ciklum is looking for an Expert Java Engineer to join our team full-time in Poland. As an Expert Java Engineer, become a part of a cross-functional development team engineering experiences of tomorrow. - Lead the Ciklum pod that our Client is bringing on to scale post-Series B engineering. - Deliver against two parallel workstreams: - Net-new feature engineering on the Java 21 / Spring Boot 3 platform. - Salesforce-to-microservices data and capability migration. - Act as the single throat-to-choke for the pod technically, and the principal technical interface to Client's VP Engineering and senior staff engineers. Responsibilities - Own the technical roadmap and sequencing of the Salesforce → microservices migration. - Define bounded contexts, the order of extraction, and the parallel-run / cutover strategy. - Set engineering standards for the pod — ADRs, code review bar, branching model, definition of done. - Run the pod's delivery rhythm: planning, demos, retros, weekly engineering written update to Client. - Personally code 40–60% of the time. This is a hands-on lead role, not an architect-on-the-sidelines role. - Front the technical relationship with Client — RFC reviews, architectural debates, escalation point for blockers. - Own quality at the pod level: SLOs are met, test coverage holds, deployments don't break trunk. - Be the productivity multiplier on AI tooling for the pod — set the patterns for Copilot/Claude Code use, prompt libraries, AI-assisted code review. Qualifications - 8+ years building Java backend systems, with at least 3 years on Spring Boot in production. - Demonstrable monolith-to-microservices migration experience as the technical lead — not as a contributor. - Strong AWS architectural experience — VPC design, IAM, RDS PostgreSQL, ECS/EKS, SQS/SNS or equivalent. - Hands-on with async messaging architectures (Kafka, RabbitMQ, AWS SNS/SQS, or equivalent) including idempotency, ordering, and backpressure. - Track record of leading pods of 4–8 engineers in a fully remote or hybrid setting. - Native-level English — written and spoken. You will write the team's ADRs and design docs. Desirable - Direct experience with Salesforce data extraction and migration to a relational target. - Working experience with AI agent frameworks — LangGraph, LangChain, CrewAI, or comparable. - Logistics, supply chain, B2B marketplace, or WMS / TMS domain background. - Prior technical-lead role in a Series B–C scale-up that grew from 5 to 50+ engineers. - Open-source contributions or technical writing that demonstrate the engineering bar. Benefits - Strong community: Work alongside top professionals in a friendly, open-door environment. - Growth focus: Take on large-scale projects with a global impact and expand your expertise. - Tailored learning: Boost your skills with internal events (meetups, conferences, workshops), Udemy access, language courses, and company-paid certifications. - Endless opportunities: Explore diverse domains through internal mobility, finding the best fit to gain hands-on experience with cutting-edge technologies. - Flexibility: Enjoy flexibility – full remote working possibilities. - Care: We’ve got you covered with company-paid medical insurance, mental health support, and financial & legal consultations. Company Description At Ciklum, we are always exploring innovations, empowering each other to achieve more, and engineering solutions that matter. With us, you’ll work with cutting-edge technologies, contribute to impactful projects, and be part of a One Team culture that values collaboration and progress. With delivery centers in Wrocław and Gdańsk, our 300+ professionals in Poland drive forward-thinking solutions for global clients. Join a community where collaboration sparks innovation—and your impact reaches millions. Explore, empower, engineer with Ciklum!

• Collaborate with Territory Manager, channel partners, and end users to design Audio, Video, and Control solutions • Lead field training initiatives, develop and teach advanced training curriculum, and provide advanced-level seminars • Perform onsite programming, commissioning, and troubleshooting for Q-SYS professional services • Represent Q-SYS at trade shows and present technical topics • Influence product development by reporting use cases and customer requirements • Communicate product issues and customer needs to various internal divisions • Mentor other Systems Application Engineers and participate as a subject matter expert • Assist in building and programming technology demonstrations for trade shows

• Own the integration, configuration, and output quality of security tooling that powers our platform • Tune outputs to maximize signal and minimize noise — decide what to surface, what to suppress, and what to enrich • Design rules, severity scoring, and triage flows that make findings actionable rather than overwhelming • Build the security judgment layer on top of underlying tooling — context-aware prioritization and exploitability reasoning • Partner with engineers on how findings are presented in the UI and how remediation flows work • Work with PM and design on roadmap priorities, providing the security expertise that drives what to build next • Review and shape architectural choices that affect security outcomes • Engage with customers directly to understand how they use the platform and what's blocking adoption • Benchmark our output quality against competitors and close gaps where they exist • Contribute back to the open source security tooling we depend on where it makes sense