Overview

In this role you will serve as the technical reference for Vulnerability Management within a large-scale financial services environment. You will lead advanced analysis, risk-based prioritization and remediation efforts across infrastructure, apps, cloud and containers. You’ll coordinate with specialized teams to drive automation, governance and service improvement, and oversee critical or exploited vulnerabilities. This position offers the chance to shape vulnerability practices and contribute to secure, AI-assisted operations.

Compensaciones / Beneficios

- Hybrid working model
- 8 weeks teleworking outside usual area
- Adaptable start and finish times
- career plan development
- training and language learning support
- national and international mobility

Responsabilidades

- Act as the technical reference for Vulnerability Management operations and resolve escalations
- Perform advanced analysis and risk-based prioritization (CVSS, EPSS, CISA KEV, exposure, criticality, threat intelligence)
- Define and monitor remediation activities, mitigations and compensating controls
- Coordinate with Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams




- Supervising critical or actively exploited vulnerabilities, including verification and closure
- Monitor SLAs, KPIs and reporting; identify automation and service improvement opportunities
- Contribute to the evolution of the service and safe supervised use of AI in Vulnerability Management

Requisitos principales

- 5+ years in cybersecurity with substantial Vulnerability Management experience
- Strong knowledge of vulnerability lifecycle and risk-based prioritization (CVSS, EPSS, CISA KEV, Threat Intelligence)
- Experience with vulnerability scanning/management tools, preferably Qualys
- Solid knowledge of Windows, Linux, networking, applications, Cloud and container environments
- Experience in exploitation analysis, mitigations and compensating controls, plus SLA/KPI reporting
- Knowledge of scripting, REST APIs, JSON and automation
- Strong technical leadership, autonomy and cross-functional coordination

- leadership
- autonomy
- multidisciplinary coordination
- vulnerability lifecycle and risk-based prioritization
- CVSS, EPSS, CISA KEV, Threat Intelligence
- Qualys (and vulnerability scanning/management tools)

📌 Application Security and Secure Development - tres cantos
🏢 GMV
📍 Tres Cantos