Vulnerability Assessments SME

1 tydzień temu


Kraków, Lesser Poland Antalpl Pełny etat
Vulnerability Management Assessments SME

Contract type: B2B
Work model: Hybrid – 6 days per month from the office (Kraków preferred, Warsaw possible)

Role Overview

We are looking for an experienced Vulnerability Management Assessments Subject Matter Expert (SME) to join a global cybersecurity organization supporting large-scale enterprise technology environments.

The role focuses on vulnerability assessment, secure development, threat analysis and remediation tracking across complex IT estates including on-prem, cloud and third-party environments. You will play a key part in ensuring vulnerabilities are properly identified, assessed, validated and remediated, while maintaining strong operational, governance and audit readiness.

This is a hands-on expert role combining technical vulnerability analysis, operational leadership and stakeholder coordination.

Key Responsibilities
Operations
  • Design, improve and maintain vulnerability management operational models

  • Identify service gaps and create uplift and improvement roadmaps

  • Define and follow critical operational paths to ensure efficient and timely delivery

  • Support global vulnerability management operations, including time-critical activities

Assessment & Vulnerability Management
  • Ensure real-time response to emerging threats and vulnerabilities

  • Perform and oversee vulnerability analysis using intelligence-driven risk assessment

  • Conduct and review:

    • SAST, DAST, MAST and FOSS scanning results

    • Application and code-level vulnerability findings

  • Validate and manage:

    • False positives

    • Temporary fixes

    • Criticality ratings

    • Exposed secrets and credentials

  • Ensure all findings are correctly documented and audit-ready

  • Support threat-driven vulnerability prioritization based on current attacker techniques and trends

Governance & Risk
  • Support responses to audit, regulatory and risk review requests

  • Contribute to cybersecurity risk reporting (KRIs, KCIs, risk maps, executive updates)

  • Provide expert input to security governance and risk oversight processes

Collaboration & Leadership
  • Work closely with:

    • Threat intelligence

    • Incident response

    • Cloud security

    • Perimeter and application security teams

  • Coordinate remediation efforts across multiple stakeholders

  • Handle escalations and high-priority security issues

  • Operate effectively in a globally distributed, follow-the-sun environment

Required Skills & Experience
Technical & Professional
  • Strong experience in the Vulnerability Management lifecycle

  • Hands-on knowledge of:

    • SAST, DAST, MAST, FOSS scanning

    • Application security testing

    • Vulnerability triage and remediation workflows

  • Ability to review and understand code and security findings

  • Experience with tools such as:

    • Vulnerability scanners (e.g. Nessus)

    • Application security platforms

    • Code and dependency scanning tools

  • Solid understanding of:

    • CVE, CWE, CVSS

    • MITRE, NVD, CISA frameworks

    • Threats, risks and attacker techniques (TTPs)

Experience
  • Minimum 3 years in Vulnerability Management
    or

  • 3–5 years in IT Security / Cybersecurity roles

Ways of Working
  • Strong analytical and problem-solving skills

  • High level of integrity and professionalism

  • Ability to work under pressure and meet strict deadlines

  • Proactive, independent and collaborative mindset

  • Excellent communication and stakeholder management skills

  • Comfortable working in global, multi-time-zone environments

Tools & Platforms
  • SharePoint

  • Microsoft Excel

  • GitHub

  • Confluence

Benefits
  • Private medical care (LuxMed)

  • MyBenefit cafeteria system

  • Dedicated Contractor Care support



  • Kraków, Lesser Poland Antal Poland Pełny etat

    Vulnerability Management Assessments SMEContract type: B2BWork model: Hybrid – 6 days per month from the office (Kraków preferred, Warsaw possible**)Role Overvi**ewWe are looking for an experienced Vulnerability Management Assessments Subject Matter Expert (SME) to join a global cybersecurity organization supporting large-scale enterprise technology...


  • Kraków, Lesser Poland Antal Poland Pełny etat

    Vulnerability Scanning Cloud SME (Cybersecurity)Contract type:B2BWork mode:Hybrid – 6 days per month from the office (Kraków preferred, or Warsaw)Role OverviewWe are looking for an experiencedVulnerability Scanning Cloud Subject Matter Expert (SME)to join a global Cybersecurity function within a large-scale, cloud-driven technology environment.The role...


  • Kraków, Lesser Poland Antalpl Pełny etat

    Lokalizacja: KrakówTryb pracy: hybrydowy Poszukujemy Vulnerability Assessment Specialist, który wesprze globalny zespół Cybersecurity w identyfikowaniu i zarządzaniu podatnościami w systemach IT, aplikacjach i środowisku chmurowym.Zakres obowiązków:Analiza i weryfikacja podatności w systemach, aplikacjach i w chmurze.Priorytetyzacja działań...


  • Kraków, Lesser Poland IG Group Pełny etat

    Job TitleFINANCIAL INTERNAL CONTROLS SMEJob DescriptionMinimum compensation: starting from PLN. The final offer will be determined based on the candidate's experience and competenciesSo, who are we?Hello, we're IG Group. We are a publicly-traded FTSE250 FinTech company who run mobile, web and desktop platforms that help our clients trade stocks & shares,...

  • Product Security Specialist

    1 tydzień temu


    Kraków, Lesser Poland Hitachi Energy Pełny etat

    The opportunityHitachi Energy, is looking for a highly motivated Product Security Specialist, to be responsible to Establish an Enterprise Approach to Product Risk Management. We are an energy technology company with engineers, digital pioneers, creators, and innovators at our core. We do more than keep the lights on, our purpose is to inspire sustainable...


  • Kraków, Lesser Poland Antalpl Pełny etat

    Job Title: Threat and Controls Assessment SpecialistLocation: Hybrid (6 days per month in Kraków or Warsaw office, Kraków preferred)Contract Type: B2BBenefits:LuxMed healthcare packageMyBenefit cafeteriaDedicated support from Contractor CareAbout the RoleWe are seeking a Threat and Controls Assessment Specialist to join our global Cybersecurity team. In...


  • Kraków, Lesser Poland Antalpl Pełny etat

    Cloud Security Specialist – CNAPP Location: Hybrid – Kraków (preferred) or Warsaw (6 office days per monthBenefitsPrivate medical care (LuxMed)MyBenefit cafeteria systemDedicated Contractor Care supportRole OverviewWe are looking for an experienced Cloud Security Specialist to join a Cloud-Native Application Protection Platform (CNAPP) team. This role...


  • Kraków, Lesser Poland Mindbox Pełny etat

    OfferFlexible cooperation model – choose the form that suits you best (B2B, employment contract, etc.)Hybrid work setup – remote days available depending on the client's arrangements – 6 days / month from office in KrakówCollaborative team culture – work alongside experienced professionals eager to share knowledgeContinuous development – access to...


  • Kraków, Lesser Poland Antal Poland Pełny etat

    Cloud Security Specialist – CNAPPLocation: Hybrid – Kraków (preferred) or Warsaw (6 office days per monthBenefitsPrivate medical care (LuxMed)MyBenefit cafeteria systemDedicated Contractor Care suppor**tRole Overvi**ewWe are looking for an experienced Cloud Security Specialist to joina Cloud-Native Application Protection Platform (CNAPP) team. This role...


  • Kraków, Lesser Poland Jacobs Pełny etat

    At Jacobs, we're challenging today to reinvent tomorrow by solving the world's most critical problems for thriving cities, resilient environments, mission-critical outcomes, operational advancement, scientific discovery and cutting-edge manufacturing, turning abstract ideas into realities that transform the world for good.Your impactAt Jacobs, we're...