Vulnerability Management Senior Specialist – Cybersecurity

About the Position

Unleash the Power of Vulnerability Response - Shape the Future of Cybersecurity!

Krakow-based opportunity with hybrid work model (up to 4 remote days per week).

As a Vulnerability Management Senior Specialist – Cybersecurity, you will be working for our client, a leading player in the financial industry, committed to safeguarding digital assets and strengthening security posture. You will help build resilient systems by leading critical vulnerability assessments, guiding remediation efforts, and ensuring risk mitigation across enterprise environments. Join a forward-thinking team driving innovation and operational excellence in cybersecurity.

Responsibilities

• Review critical and high-severity vulnerabilities from sources such as NIST/NVD and vendor advisories to determine impact and inform stakeholders.
• Validate vulnerability findings with technical evidence to confirm true/false positives and refine affected asset lists.
• Map vulnerabilities to assets and coordinate with service owners for accurate impact assessment.
• Recommend practical remediation strategies, including patches, upgrades, configuration hardening, and controls, outlining risks and dependencies.
• Produce comprehensive technical reports detailing root cause, attack vectors, business impact, and remediation steps suited for both technical teams and governance bodies.
• Collaborate with infrastructure, platform, and application teams to plan, execute, and support remediation activities, resolving blockers as they arise.
• Track remediation progress, update statuses, and escalate delays or risks to ensure timely resolution.
• Verify the effectiveness of remediation efforts through re-scans and validation testing, documenting residual risks where immediate mitigation is not possible.
• Contribute to regulatory, internal, and external audit interactions, supporting compliance and governance documentation.
• Handle ad hoc tasks, including operational support, escalation management, and cross-team collaboration.

Requirements

• At least 5 years of experience in IT Security or a comparable role.
• Proven expertise assessing critical/high-severity vulnerabilities from sources like NIST/NVD, translating technical details into clear business impact.
• Strong understanding of common vulnerability types and attack techniques (e.g., remote code execution, privilege escalation, authentication bypass).
• Hands-on experience with vulnerability detection tools, including Tenable, SAST, DAST, and similar solutions.
• Knowledge of the CI/CD pipeline integration of security testing and remediation.
• Solid technical foundation across networking and application delivery environments, including WAFs, TLS, load balancers, and cloud/on-prem architectures.
• Practical remediation experience ranging from patching and upgrades to configuration hardening and controls.
• Excellent stakeholder management skills, partnering effectively with service owners, platform teams, and operations.
• Advanced written communication skills to prepare structured technical reports and guidance for diverse audiences.
• Experience working in Cybersecurity Operations, Risk Management, and Governance within large or enterprise organizations.
• Organized, delivery-focused, with a proactive approach to work.
• Ability to work remotely with a minimum of 6 days per month in the office.

Nice to Have

• Certifications such as CISSP, CISA, GISF, or equivalent.
• Experience with cloud security frameworks (e.g., AWS, Azure).

Language Required for the Role

• Fluent English, with excellent command of both spoken and written communication.

We Offer

• Competitive salary range: 27,300 - 32,760 PLN (B2B) / 19,500 - 23,500 PLN (Employment Contract)
• Hybrid work model with up to 4 remote days per week
• Opportunity to work with a leading player in the financial industry
• Access to various benefits and perks

About the Company

Join our client, a leading player in the financial industry, committed to safeguarding digital assets and strengthening security posture. We are dedicated to driving innovation and operational excellence in cybersecurity.

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.

Internal number #10114