We are looking for a Vulnerability & Exposure Management Analyst to join a mature Cyber Defense Center within a global enterprise environment.
This role sits at the core of the vulnerability lifecycle, acting as a bridge between security, infrastructure, and development teams , ensuring that identified vulnerabilities are properly prioritised, communicated, and remediated.
Rather than focusing on scanning or hands‑on remediation, this position plays a key orchestration and advisory role , working closely with internal stakeholders across multiple countries.
Your responsibilities
- Manage the lifecycle of vulnerabilities and exposures:
- triage, prioritisation, assignment and follow‑up
- infrastructure, web applications, and (in the future) APIs
- Apply risk‑based prioritisation using frameworks such as CVSS
- Provide clear and actionable remediation guidance to internal teams
- Collaborate with infrastructure, cloud and development teams to support remediation
- Act as a first point of contact for internal stakeholders , handling:
- support requests
- troubleshooting
- clarification of findings
- Develop and maintain remediation guidelines for:
- security misconfigurations (Non‑CVE)
- Contribute to process improvements, automation and new initiatives
- Monitor and track remediation progress through dashboards and reports
- Help improve the overall vulnerability management operating model
What we’re looking for
Must‑have
- 5+ years of experience in Cybersecurity Operations
- Hands‑on experience in Vulnerability Management / Exposure Management
- Strong understanding of:
- CVEs and security misconfigurations
- risk prioritisation (CVSS or similar)
- Experience across:
- web applications (OWASP mindset)
- Solid understanding of:
- networking, OS (Windows/Linux)
- Active Directory or IAM environments
- Strong communication skills and stakeholder management
- Experience working with ticketing systems (Jira, ServiceNow, etc.)
Nice to have
- Exposure to cloud environments (AWS, Azure, GCP)
- Knowledge of CIS benchmarks or hardening standards
- Basic scripting (Python / PowerShell)
- Familiarity with graph‑based data (e.g., Neo4j)
What makes this role different
- You will not just detect vulnerabilities — you will drive their resolution
- Highly collaborative role with strong exposure to international teams
- Opportunity to influence processes and shape how vulnerability management is done
- Potential to grow into leadership responsibilities over time
Working environment
- International and English‑speaking environment
- Flexible schedule with high autonomy
- Occasional travel within Europe
- Salary: 51k-56k€ (depending on experience)
- Versátil compensation package (~3.7k net/year)
- Private health insurance
- Remote work allowance (1‑2 days/week office) and flexible hours