Vulnerability Management Specialist
My responsibilities:
- Conduct regular vulnerability assessments and scans using Qualys to identify potential cybersecurity vulnerabilities, misconfigurations and weaknesses across systems and applications.
- Analyse identified vulnerabilities and prioritise response based on risk, impact, and exploitability to develop effective remediation strategies.
- Collaborate with IT service stakeholders and engineering teams to implement patching and remediation solutions for vulnerabilities.
- Monitor threat intelligence feeds and stay updated with the latest vulnerabilities and associated exploits that may affect the organization.
- Evaluate if exploitation took place for in-scope vulnerabilities, hunt for indicators and observables.
- Generate comprehensive reports on broad vulnerability trends and remediation statuses for management review.
- Participate in the development and enhancement of vulnerability management processes and procedures, assist in testing and implementing brand new technologies.
- Conduct training and awareness programs for team members and stakeholders regarding vulnerability management best practices.
- Engage in continuous improvement initiatives to enhance the overall security posture of the organization.
- Collaborate with other operational security stakeholders such as the SOC, CSIRT and dedicated defense teams.
The knowledge I own:
Junior Candidates:
- Basic understanding of vulnerability management concepts and processes, including risk assessment and remediation.
- Familiarity with security tools, particularly vulnerability scanning and assessment tools like Qualys.
- High level understanding of industry standards, frameworks and best practices (such as NIST SP 800-40, CVSS, CVE, CWE, OVAL, etc.)
- Understanding of common security vulnerabilities and their potential impacts (e.g., SANS CWE TOP 25, OWASP Top Ten).
- Strong problem-solving skills and attention to detail.
Medior Candidates:
- Solid understanding of vulnerability management frameworks and best practices.
- Experience utilizing Qualys for vulnerability assessments, including conducting scans and analysing results.
- Knowledge of patch management processes and risk mitigation strategies.
- Familiarity with threat intelligence sources and incident response practices.
- Excellent communication skills to articulate vulnerabilities and collaborate with cross-functional teams effectively.
The offer that would convince me:
- Possibility to improve yourself in a constantly growing organization
- Secure, long-term job opportunity at a stable company
- An above average salary
- Intensive, individual, and practical training
- Varied and interesting responsibilities
- Modern and comfortable working environment (adjustable desk and chair, sports facilities)
- Home office possibility
Location:
Hybrid
Start date:
Immediately
Online application:
Please use our online application and attach your resume.