Role description

We are looking for the very Top Talent…and we would be delighted if you were to join our team!
More in details, UST is a multinational company based in North America, certified as a Top Employer and Great Place to Work company with over 35.000 employees all over the world and presence in more than 35 countries. We are leaders on digital technology services, and we provide large-scale technologic solutions to big companies.

What we look for?
We are looking for an Exposure Management Analyst with a solid foundation in IT security, vulnerability management, and stakeholder coordination. The ideal candidate has practical experience managing security findings, remediation processes, and compliance activities within complex technology environments.

Key attributes include:
2-4 years of experience in IT, cybersecurity, vulnerability management, compliance, governance, infrastructure operations, audit support, or security monitoring.
Understanding of vulnerability scan results, penetration testing findings, and remediation workflows.
Experience working with ticketing, ITSM, or GRC platforms to track and manage remediation activities.
Strong organizational, analytical, and decision-making skills.
Ability to collaborate with technical and non-technical stakeholders and influence remediation efforts.
Familiarity with security configuration standards, CIS benchmarks, and hardening guidelines.
Professional proficiency in English.
Eligibility to work in Spain.
Curiosity, adaptability, and a willingness to learn new technologies and security domains.

Nice to have:
Experience with Nexpose or similar vulnerability scanning solutions.
ServiceNow Vulnerability Response knowledge.
Azure cloud security experience.
Security certifications such as CompTIA Security+.
Experience in financial services or other regulated industries.
German language skills.

Main tasks and accountabilities will be:
Manage security findings and remediation activities throughout their entire lifecycle.




Ensure all findings are assigned to the appropriate technology or application owners and actively tracked until closure.
Review and approve or reject false-positive requests based on evidence and technical analysis.
Analyze vulnerability scan outputs, penetration test reports, and security findings to determine impact and required actions.
Coordinate remediation efforts with technology teams, security experts, and system owners.
Monitor compliance with security baselines and follow up on remediation plans.
Lead resolution activities for findings affecting multiple teams or organizational units.
Serve as a key contact for stakeholders requiring support, guidance, or escalation assistance.
Ensure documentation, evidence, and remediation records meet audit and compliance requirements.
Produce operational reporting on remediation performance, overdue findings, risk indicators, and overall exposure status.
Escalate critical or stalled issues and coordinate with incident response teams when required.
Contribute to continuous improvement initiatives and support the onboarding of new exposure management processes and security domains.

What do we expect from you?
Strong understanding of vulnerability management and exposure management principles.
Ability to interpret technical security findings and coordinate remediation efforts effectively.
Experience managing large volumes of work items without losing ownership or oversight.
Excellent stakeholder management, communication, and collaboration skills.
Confidence to make informed decisions and challenge unsupported claims when necessary.
Structured and proactive approach to prioritization, follow-up, and issue resolution.
Knowledge of security baselines,



hardening standards, and compliance requirements.
Commitment to process quality, audit readiness, and risk reduction.
Team-oriented mindset with the willingness to learn and grow within a integral security environment.
Ability to work in a fast-paced, highly regulated environment while maintaining attention to detail and accountability.

Work Location
Hybrid position in Madrid (3 days at client´s office, Madrid city center).

Work Schedule
Business hours.

What can we offer?
23 days of Annual Leave plus the 24th and 31st of December as discretionary days!
Numerous benefits (Health Care Plan, teleworking compensation, Life and Accident Insurances).
`Retribución Flexible´ Program: (Meals, Kinder Garden, Transport, online English lessons, Health Care Plan…)
Free access to several training platforms
Professional stability and career plans
UST also, compensates referrals from which you could benefit when you refer professionals.
The option to pick between 12 or 14 payments along the year.
Real Work Life Balance measures (flexibility, WFH or remote work policy, compacted hours during summertime…)
UST Club Platform discounts and gym Access discounts

If you would like to know more, don’t hesitate to apply and we’ll get in touch to fill you in detail. We are waiting for you!

Skills

Vulnerability Management, Security Baselines, Stakeholder Management, ServiceNow

About UST
UST is a global digital transformation solutions provider. For more than 20 years, UST has worked side by side with the world’s best companies to make a real impact through transformation. Powered by technology, inspired by people and led by purpose, UST partners with their clients from design to operation. With deep domain expertise and a future-proof philosophy, UST embeds innovation and agility into their clients’ organizations. With over 30,000 employees in 30 countries, UST builds for boundless impact—touching billions of lives in the process.

📌 Exposure Management Analyst- Hybrid (Madrid) (España)
🏢 Ust
📍 España