Atlassian Security Specialist

Xebia is a global AI-first, digital transformation, and engineering partner. With over 25 years of experience and a team of 5,000 professionals across 16 countries, we help organizations design and build scalable products, platforms, and data-driven solutions. We specialize in Artificial Intelligence, Data and Cloud, Intelligent Automation, and Digital Products, combining deep technical expertise with a strong focus on engineering excellence and a people-first culture. In the CEE region, we’re a team of nearly 1,000 experts delivering modern applications, data platforms, and AI solutions for clients such as Millennium, ING, Play, Edenred, Arabian Drilling, FedEx, Leroy Merlin, Truecaller, Volotea, Schmitz Cargobull, and many, many more. We work with leading technologies including AWS, Azure, GCP, Databricks, and Snowflake, and combine strong engineering culture with a consulting mindset and a continuous focus on growth and knowledge sharing.

You will be:

• conducting a security audit of the Atlassian Cloud environment, including Jira Software, Jira Service Management, and customer portals,
• reviewing Confluence integrations, Atlassian Marketplace applications, and API-based integrations,
• assessing identity and access management mechanisms, permissions, and potential data exposure risks,
• evaluating the security of Atlassian Rovo and identifying AI-related security risks,
• reviewing configurations and security controls to identify vulnerabilities, misconfigurations, and governance gaps,
• assessing risks related to data confidentiality, integrity, and availability,
• preparing an evidence-based audit report with prioritized findings, risk assessments, and practical remediation recommendations,
• developing a remediation roadmap aligned with Atlassian best practices and enterprise security standards.

Your profile:

• experience in information security, security audits, and penetration testing,
• knowledge of security frameworks and standards such as NIS2, ISO 27001, and NIST,
• hands-on experience with Atlassian Cloud security and configuration reviews,
• knowledge of Jira Software, Jira Service Management, and Confluence integrations,
• experience assessing the security of third-party applications, APIs, and system integrations,
• understanding of identity and access management, permissions, and data exposure risks,
• ability to identify security vulnerabilities, assess risks, and provide actionable remediation recommendations,
• good command of English (min. B2).

Work from the European Union region and a work permit are required.

Nice to have:

• Experience applying GenAI in a more structured way within the SDLC, including defined workflows, prompt patterns, or tool integrations embedded into daily work.
• Interest in and familiarity with emerging AI-driven practices (e.g. agent-based workflows, automation patterns, AI-augmented development), with a willingness to explore and experiment beyond standard approaches.

Recruitment Process: CV review – HR call – Interview – Client Interview – Decision