We are looking for a Vulnerability & Exposure Management Analyst to join a mature Cyber Defense Center within a global enterprise environment.

Aumente sus posibilidades de llegar a la fase de entrevista leyendo la descripción completa del puesto y enviando su solicitud sin demora.

This role sits at the core of the vulnerability lifecycle, acting as a bridge between security, infrastructure, and development teams, ensuring that identified vulnerabilities are properly prioritised, communicated, and remediated.

Rather than focusing on scanning or hands‑on remediation, this position plays a key orchestration and advisory role, working closely with internal stakeholders across multiple countries.

Your responsibilities

- - Manage the lifecycle of vulnerabilities and exposures:
- - triage, prioritisation, assignment and follow‑up
- infrastructure, web applications, and (in the future) APIs

- Apply risk‑based prioritisation using frameworks such as CVSS

- Provide clear and actionable remediation guidance to internal teams

- Collaborate with infrastructure, cloud and development teams to support remediation

- Act as a first point of contact for internal stakeholders, handling:
- - support requests
- troubleshooting
- clarification of findings

- Develop and maintain remediation guidelines for:
- - security misconfigurations (Non‑CVE)

- Contribute to process improvements, automation and new initiatives

- Monitor and track remediation progress through dashboards and reports





- Help improve the overall vulnerability management operating model

What we’re looking for

Must‑have

- - 5+ years of experience in Cybersecurity Operations

- Hands‑on experience in Vulnerability Management / Exposure Management

- Strong understanding of
- - CVEs and security misconfigurations
- risk prioritisation (CVSS or similar)

- Experience across

- - web applications (OWASP mindset)

- Solid understanding of

- - networking, OS (Windows/Linux)

- Active Directory or IAM environments

- Strong communication skills and stakeholder management

- Experience working with ticketing systems (Jira, ServiceNow, etc.)

Nice to have

- - Exposure to cloud environments (AWS, Azure, GCP)

- Knowledge of CIS benchmarks or hardening standards

- Basic scripting (Python / PowerShell)

- Familiarity xqbhyrx with graph‑based data (e.g., Neo4j)

What makes this role different

- - You will not just detect vulnerabilities — you will drive their resolution

- Highly collaborative role with strong exposure to international teams

- Opportunity to influence processes and shape how vulnerability management is done

- Potential to grow into leadership responsibilities over time

Working environment

- - International and English‑speaking environment

- Adaptable schedule with high autonomy

- Occasional travel within Europe

- Salary: 51k-56k€ (depending on experience)

- Flexible compensation package (~3.7k net/year)

- Private health insurance

- Remote work allowance (1‑2 days/week office) and flexible hours

📌 Security Analyst (Vulnerability & Exposure) (Barcelona)
🏢 Q-Tech
📍 Barcelona