Vulnerability Management Specialist

Global (English)

We are seeking a Vulnerability Management Specialist to join our Information Security team. The candidate will own and continuously improve the vulnerability management process, perform risk-based prioritization of vulnerabilities, and collaborate closely with IT and business units. This role requires a proactive individual with strong technical security expertise, excellent communication skills, and the ability to translate technical risks into business-relevant messages.

• Own and continuously improve the vulnerability management process.
• Perform risk-based prioritization of vulnerabilities in close collaboration with IT and business units.
• Monitor remediation SLAs and track critical findings through to closure.
• Establish and maintain reporting, KPIs, and management dashboards.
• Coordinate vulnerability scans and assess relevant security advisories.

• Analyze and secure IT systems, networks, and applications.
• Design, configure, and continuously optimize automated vulnerability scanning across heterogeneous environments.
• Validate scan results to eliminate false positives and perform risk assessments using CVSS v3/v4, incorporating internal business impact context.
• Support implementation and enhancement of technical security controls (e.g., system hardening, access control, network security).
• Contribute to security assessments, penetration testing, and technical reviews.
• Support integration of security into development and operations processes (Dev Sec Ops ).
• Analyze security incidents and derive improvement measures.
• Assist in the selection, implementation, and optimization of security tools.

• Collaborate with Risk, Compliance, and IT teams.
• Support audits and regulatory requirements (e.g., ISO 27001, NIS2).
• Promote security best practices and awareness across the organization.

• Ability to translate technical risks into clear, business-relevant messages.
• Experience preparing and delivering concise management presentations and reports.
• Strong stakeholder communication skills, including interaction with senior leadership.
• Capability to provide clear, actionable recommendations for decision‑making.
• Confident communication in management and audit contexts.

• Degree in Computer Science, Information Security, or comparable qualification.
• Professional experience in Information Security / IT Security.
• Solid experience in Vulnerability Management and working with scanning tools (governance, operations, configuration, monitoring, reporting).
• Strong understanding of IT infrastructures (networks, operating systems, ideally cloud).
• Practical knowledge of technical security controls and implementations.
• Fluent English and Polish (at least B2 level)

• Experience with security tools (e.g., SIEM, EDR).
• Knowledge of automation / scripting.
• Experience in Dev Sec Ops  or Cloud Security.
• Security certifications (e.g., CEH, CISSP, CompTIA Security+).

• A cafeteria system that allows employees to personalize benefits by choosing from a variety of options.
• Generous referral bonuses, offering up to PLN6,000 for referring specialists.
• Additional revenue sharing opportunities for initiating partnerships with new clients.
• Ongoing guidance from a dedicated Team Manager for each employee.
• Tailored technical mentoring from an assigned technical leader, depending on individual expertise and project needs.
• Dedicated team‑building budget for online and on‑site team events.
• Opportunities to participate in charitable initiatives and local sports programs.
• A supportive and inclusive work culture with an emphasis on diversity and mutual respect.

Hybrid work model: 3 days from the office, 2 days of home office.

Office locations:
Warszawa, Lublin, Poznań

On call duty