Lead Security Consultant – Vulnerability Management

Responsibilities

Qualification:

Vulnerability Scanning: Greenbone/OpenVAS, Tenable, Qualys, Rapid7 InsightVM

Container & Configuration Security: Trivy, Grype, Clair, kube-bench, Checkov

Vulnerability Intelligence: CVE, EPSS, KEV, CSAF, OVAL

Vulnerability Management: DefectDojo, OWASP Dependency-Track, Faraday

Asset Management: NetBox, i-doit, GLPI, ServiceNow

Workflow & Ticketing: Jira, GitLab, OTOBO/Znuny

Framework Data:

• Analysis and evaluation of existing vulnerability management processes, security tools used, and available data sources
• Conception, setup, and further development of a holistic vulnerability management process
• Development of methods for detecting, assessing, prioritizing, and remediating security vulnerabilities in IT infrastructures
• Conception and implementation of vulnerability scans for networks, operating systems, containers, applications, and platform configurations
• Setup and operation of vulnerability detection in isolated network environments without permanent internet connection
• Development of risk-based prioritization models considering CVSS, EPSS, known exploits, and system-specific risks
• Definition and implementation of remediation processes, processing deadlines, and exception and risk acceptance procedures
• Setup and optimization of reliable asset and inventory management as the basis for vulnerability management
• Consolidation and evaluation of vulnerability findings from different tools into a central overview
• Development of KPIs, reporting structures, and management dashboards for monitoring vulnerability management
• Coordination with IT operations, system administrators, and other security areas for sustainable remediation of identified vulnerabilities
• Independent practical implementation and validation of developed concepts within a pilot environment
• Creation of a rollout and scaling concept for further systems and network zones
• 6-10 years of relevant project experience in vulnerability management, IT security, or security architecture
• Demonstrable experience in the independent conception, introduction, and practical implementation of vulnerability management processes
• Sound knowledge of the entire vulnerability lifecycle from detection to demonstrable remediation
• Practical experience with vulnerability scanners and security assessment tools in self-operated IT infrastructures
• Experience with isolated network environments, offline scanning, and controlled updating of vulnerability data
• Very good knowledge of risk-based assessment and prioritization of security vulnerabilities (CVSS, EPSS, CVE, KEV)
• Experience in the conception and introduction of remediation processes, escalation mechanisms, and risk acceptance procedures
• Knowledge in setting up and maintaining asset inventories and in assessing system dependencies
• Experience in consolidating and evaluating vulnerability findings from different data sources
• Practical knowledge in several of the following technologies or comparable solutions:
• Experience in defining and evaluating relevant security metrics and in reporting to business units and management
• Ideally, experience in security-critical or regulated IT infrastructures
• Certifications such as CISSP, GIAC, or OSCP are an advantage
• Very good German language skills, spoken and written
• Residence in Germany

Project details

Short notice, upon customer confirmation and commissioning

Utilization: Full-time (5 days/week)

Initially until 12/31/2026, extension expected until 12/31/2027

Approx. 95% remote, occasional on-site assignments by arrangement

• Start: ab sofort
• Duration: 3 Monate
• Remote: remote
• Location: Meckenheim, Deutschland, DE
• Languages: German