Vulnerability Management Senior Specialist – Cybersecurity

About the Position

Unleash the Power of Vulnerability Response - Shape the Future of Cybersecurity!

Krakow-based opportunity with hybrid work model (up to 4 remote days per week).

As a Vulnerability Management Senior Specialist – Cybersecurity, you will be working for our client, a leading player in the financial industry, committed to safeguarding digital assets and strengthening security posture. You will help build resilient systems by leading critical vulnerability assessments, guiding remediation efforts, and ensuring risk mitigation across enterprise environments. Join a forward-thinking team driving innovation and operational excellence in cybersecurity.

Responsibilities

• Review critical and high-severity vulnerabilities from sources such as NIST/NVD and vendor advisories to determine impact and inform stakeholders.
• Validate vulnerability findings with technical evidence to confirm true/false positives and refine affected asset lists.
• Map vulnerabilities to assets and coordinate with service owners for accurate impact assessment.
• Recommend practical remediation strategies, including patches, upgrades, configuration hardening, and controls, outlining risks and dependencies.
• Produce comprehensive technical reports detailing root cause, attack vectors, business impact, and remediation steps suited for both technical teams and governance bodies.
• Collaborate with infrastructure, platform, and application teams to plan, execute, and support remediation activities, resolving blockers as they arise.
• Track remediation progress, update statuses, and escalate delays or risks to ensure timely resolution.
• Verify the effectiveness of remediation efforts through re-scans and validation testing, documenting residual risks where immediate mitigation is not possible.
• Contribute to regulatory, internal, and external audit interactions, supporting compliance and governance documentation.
• Handle ad hoc tasks, including operational support, escalation management, and cross-team collaboration.

Requirements

• At least 5 years of experience in IT Security or a comparable role.
• Proven expertise assessing critical/high-severity vulnerabilities from sources like NIST/NVD, translating technical details into clear business impact.
• Strong understanding of common vulnerability types and attack techniques (e.g., remote code execution, privilege escalation, authentication bypass).
• Hands-on experience with vulnerability detection tools, including Tenable, SAST, DAST, and similar solutions.
• Knowledge of the CI/CD pipeline integration of security testing and remediation.
• Solid technical foundation across networking and application delivery environments, including WAFs, TLS, load balancers, and cloud/on-prem architectures.
• Practical remediation experience ranging from patching and upgrades to configuration hardening and controls.
• Excellent stakeholder management skills, partnering effectively with service owners, platform teams, and operations.
• Advanced written communication skills to prepare structured technical reports and guidance for diverse audiences.
• Experience working in Cybersecurity Operations, Risk Management, and Governance within large or enterprise organizations.
• Organized, delivery-focused, with a proactive approach to work.
• Ability to work remotely with a minimum of 6 days per month in the office.

Nice to Have

• Certifications such as CISSP, CISA, GISF, or equivalent.
• Experience with cloud security frameworks (e.g., AWS, Azure).

Language Required for the Role

• Fluent English, with excellent command of both spoken and written communication.

Eligibility to Work in Europe

• Only candidates with an existing legal right to work in the European Union will be considered for this role.

We Offer

• Competitive salary range of 27,300 - 32,760 PLN per year.
• Hybrid work model with up to 4 remote days per week.
• Access to various employee benefits such as medical insurance, Multisport, Pluralsight, and more.
• Integrational events and Ambassador Program.

About the Company

Join our team in Krakow as a Vulnerability Management Senior Specialist – Cybersecurity, focusing on safeguarding digital assets and strengthening security posture.