Atlassian Security Specialist

Xebia is a global AI-first, digital transformation, and engineering partner. With over 25 years of experience and a team of 5,000 professionals across 16 countries, we help organizations design and build scalable products, platforms, and data-driven solutions.

You will be:

• conducting a security audit of the Atlassian Cloud environment, including Jira Software, Jira Service Management, and customer portals,
• reviewing Confluence integrations, Atlassian Marketplace applications, and API-based integrations,
• assessing identity and access management mechanisms, permissions, and potential data exposure risks,
• evaluating the security of Atlassian Rovo and identifying AI-related security risks,
• reviewing configurations and security controls to identify vulnerabilities, misconfigurations, and governance gaps,
• assessing risks related to data confidentiality, integrity, and availability,
• preparing an evidence-based audit report with prioritized findings, risk assessments, and practical remediation recommendations,
• developing a remediation roadmap aligned with Atlassian best practices and enterprise security standards.

Your profile:

• experience in information security, security audits, and penetration testing,
• knowledge of security frameworks and standards such as NIS2, ISO 27001, and NIST,
• hands-on experience with Atlassian Cloud security and configuration reviews,
• knowledge of Jira Software, Jira Service Management, and Confluence integrations,
• experience assessing the security of third-party applications, APIs, and system integrations,
• understanding of identity and access management, permissions, and data exposure risks,
• ability to identify security vulnerabilities, assess risks, and provide actionable remediation recommendations,
• good command of English (min. B2).

Work from the European Union region and a work permit are required.

Nice to have:

Experience applying GenAI in a more structured way within the SDLC, including defined workflows, prompt patterns, or tool integrations embedded into daily work.

• Interest in and familiarity with emerging AI-driven practices (e.g. agent-based workflows, automation patterns, AI-augmented development), with a willingness to explore and experiment beyond standard approaches.