We are looking for a

Vulnerability & Exposure Management Analyst to join a mature Cyber Defense Center within a general enterprise environment.

This role sits at the core of the vulnerability lifecycle, acting as a bridge between security, infrastructure, and development teams , ensuring that identified vulnerabilities are properly prioritised, communicated, and remediated.

Rather than focusing on scanning or hands‑on remediation, this position plays a key orchestration and advisory role , working closely with internal stakeholders across multiple countries.

Your responsibilities

Manage the lifecycle of vulnerabilities and exposures:

triage, prioritisation, assignment and follow‑up infrastructure, web applications, and (in the future) APIs

Apply risk‑based prioritisation using frameworks such as CVSS

Provide clear and actionable remediation guidance to internal teams

Collaborate with infrastructure, cloud and development teams to support remediation

Act as a first point of contact for internal stakeholders , handling:

support requests troubleshooting clarification of findings

Develop and maintain remediation guidelines for:

security misconfigurations (Non‑CVE)

Contribute to process improvements, automation and new initiatives

Monitor and track remediation progress through dashboards and reports

Help improve the overall vulnerability management operating model

What we’re looking for Must‑have





5+ years of experience in Cybersecurity Operations

Hands‑on experience in

Vulnerability Management / Exposure Management

Strong understanding of

CVEs and security misconfigurations risk prioritisation (CVSS or similar)

Experience across

web applications (OWASP mindset)

Solid understanding of

networking, OS (Windows/Linux)

Active Directory or IAM environments

Strong communication skills and stakeholder management

Experience working with ticketing systems (Jira, ServiceNow, etc.)

Nice to have

Exposure to cloud environments (AWS, Azure, GCP)

Knowledge of CIS benchmarks or hardening standards

Basic scripting (Python / PowerShell)

Familiarity with graph‑based data (e.g., Neo4j)

What makes this role different

You will not just detect vulnerabilities — you will drive their resolution

Highly collaborative role with strong exposure to international teams

Opportunity to influence processes and shape how vulnerability management is done

Potential to grow into leadership responsibilities over time

Working environment

International and English‑speaking environment

Flexible schedule with high autonomy

Occasional travel within Europe

Salary

51k-56k€

(depending on experience)

Flexible compensation package (~3.7k net/year)

Private health insurance

Remote work allowance (1‑2 days/week office) and flexible hours

📌 Security Analyst (Vulnerability & Exposure) (Madrid)
🏢 Q-Tech
📍 Madrid