Vulnerability Management Senior Specialist – Cybersecurity

Project overview

Unleash the Power of Vulnerability Response — Shape the Future of Cybersecurity!

Krakow-based opportunity with hybrid work model (up to 4 remote days per week).

As a Vulnerability Management Senior Specialist – Cybersecurity, you will be working for our client, a leading player in the financial industry, committed to safeguarding digital assets and strengthening security posture. You will help build resilient systems by leading critical vulnerability assessments, guiding remediation efforts, and ensuring risk mitigation across enterprise environments. Join a forward-thinking team driving innovation and operational excellence in cybersecurity.

Responsibilities

You're ideal for this role if you have:

It is a strong plus if you have: (optional)

Language Required for the role:

Eligibility to work in Europe:

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.

• Review critical and high-severity vulnerabilities from sources such as NIST/NVD and vendor advisories to determine impact and inform stakeholders.
• Validate vulnerability findings with technical evidence to confirm true/false positives and refine affected asset lists.
• Map vulnerabilities to assets and coordinate with service owners for accurate impact assessment.
• Recommend practical remediation strategies, including patches, upgrades, configuration hardening, and controls, outlining risks and dependencies.
• Produce comprehensive technical reports detailing root cause, attack vectors, business impact, and remediation steps suited for both technical teams and governance bodies.
• Collaborate with infrastructure, platform, and application teams to plan, execute, and support remediation activities, resolving blockers as they arise.
• Track remediation progress, update statuses, and escalate delays or risks to ensure timely resolution.
• Verify the effectiveness of remediation efforts through re-scans and validation testing, documenting residual risks where immediate mitigation is not possible.
• Contribute to regulatory, internal, and external audit interactions, supporting compliance and governance documentation.
• Handle ad hoc tasks, including operational support, escalation management, and cross-team collaboration.
• At least 5 years of experience in IT Security or a comparable role.
• Proven expertise assessing critical/high-severity vulnerabilities from sources like NIST/NVD, translating technical details into clear business impact.
• Strong understanding of common vulnerability types and attack techniques (e.g., remote code execution, privilege escalation, authentication bypass).
• Hands-on experience with vulnerability detection tools, including Tenable, SAST, DAST, and similar solutions.
• Knowledge of the CI/CD pipeline integration of security testing and remediation.
• Solid technical foundation across networking and application delivery environments, including WAFs, TLS, load balancers, and cloud/on-prem architectures.
• Practical remediation experience ranging from patching and upgrades to configuration hardening and controls.
• Excellent stakeholder management skills, partnering effectively with service owners, platform teams, and operations.
• Advanced written communication skills to prepare structured technical reports and guidance for diverse audiences.
• Experience working in Cybersecurity Operations, Risk Management, and Governance within large or enterprise organizations.
• Organized, delivery-focused, with a proactive approach to work.
• Ability to work remotely with a minimum of 6 days per month in the office.
• Certifications such as CISSP, CISA, GISF, or equivalent.
• Experience with cloud security frameworks (e.g., AWS, Azure).
• Fluent English, with excellent command of both spoken and written communication.
• Only candidates with an existing legal right to work in the European Union will be considered for this role.

Project details

• Start: flexible
• Remote: hybrid
• Location: Krakow, PL