Vulnerability Management Senior Specialist – Cybersecurity

Our requirements

• At least 5 years of experience in IT Security or a comparable role.
• Proven expertise assessing critical/high-severity vulnerabilities from sources like NIST/NVD, translating technical details into clear business impact.
• Strong understanding of common vulnerability types and attack techniques (e.g., remote code execution, privilege escalation, authentication bypass).
• Hands-on experience with vulnerability detection tools, including Tenable, SAST, DAST, and similar solutions.
• Knowledge of the CI/CD pipeline integration of security testing and remediation.
• Solid technical foundation across networking and application delivery environments, including WAFs, TLS, load balancers, and cloud/on-prem architectures.
• Practical remediation experience ranging from patching and upgrades to configuration hardening and controls.
• Excellent stakeholder management skills, partnering effectively with service owners, platform teams, and operations.
• Advanced written communication skills to prepare structured technical reports and guidance for diverse audiences.
• Experience working in Cybersecurity Operations, Risk Management, and Governance within large or enterprise organizations.
• Organized, delivery-focused, with a proactive approach to work.
• Ability to work remotely with a minimum of 6 days per month in the office.

Optional

• Certifications such as CISSP, CISA, GISF, or equivalent.
• Experience with cloud security frameworks (e.g., AWS, Azure).

Your responsibilities

• Review critical and high-severity vulnerabilities from sources such as NIST/NVD and vendor advisories to determine impact and inform stakeholders.
• Validate vulnerability findings with technical evidence to confirm true/false positives and refine affected asset lists.
• Map vulnerabilities to assets and coordinate with service owners for accurate impact assessment.
• Recommend practical remediation strategies, including patches, upgrades, configuration hardening, and controls, outlining risks and dependencies.
• Produce comprehensive technical reports detailing root cause, attack vectors, business impact, and remediation steps suited for both technical teams and governance bodies.
• Collaborate with infrastructure, platform, and application teams to plan, execute, and support remediation activities, resolving blockers as they arise.
• Track remediation progress, update statuses, and escalate delays or risks to ensure timely resolution.
• Verify the effectiveness of remediation efforts through re-scans and validation testing, documenting residual risks where immediate mitigation is not possible.
• Contribute to regulatory, internal, and external audit interactions, supporting compliance and governance documentation.
• Handle ad hoc tasks, including operational support, escalation management, and cross-team collaboration.

About the project

This is how we organize our work

This is how we work on a project

• Continuous Integration
• DevOps

#MAKEYourCareerBETTER

ITDS’s Whistleblower Procedure

Benefits

• sharing the costs of sports activities
• private medical care
• flexible working time
• fruits
• integration events
• corporate gym
• saving & investment scheme
• no dress code
• coffee / tea
• drinks
• christmas gifts
• birthday celebration
• sharing the costs of a streaming platform subscription
• access to +100 projects
• access to Pluralsight

Recruitment stages

• 1.
  online interview
• 2.
  online interview

ITDS Polska Sp. z o.o.