Vulnerability Response Senior SME

Mindbox connects top IT talents with technology projects for leading enterprises across Europe. This role involves joining a project at one of the world's leading international banks to shape the Vulnerability Management Response & Remediation function, delivering cybersecurity solutions that protect a global financial institution's technology estate across on-premise, cloud, and third-party environments.

• Minimum 5 years of experience in IT Security or a similar role
• Proven experience reviewing and assessing critical/high-severity vulnerabilities, translating findings into clear business impact
• Strong understanding of common vulnerability types and attack techniques (e.g., remote code execution, privilege escalation, authentication bypass)
• Experience with vulnerability scanning tools, including Tenable, and application security testing (SAST, DAST)
• Solid technical foundation across networking and application delivery, including WAFs, load balancers, and TLS/certificates
• Experience working across on-premise and Cloud environments
• Practical knowledge of remediation approaches: patching, upgrades, configuration hardening, and compensating controls
• Strong stakeholder management skills collaborating with service owners, platform teams, and governance stakeholders
• Excellent written communication skills

Nice to have:

• Good understanding of the CI/CD lifecycle and integration of security testing into build and release pipelines
• Background in Cyber Security Operations, Risk Management, or Governance within a mid-to-large enterprise

• Analyze critical and high-severity vulnerabilities from sources such as NIST/NVD and vendor advisories, determining exposure and business impact
• Confirm findings, validate exposure, and map vulnerabilities to assets through CMDB and inventory collaboration
• Recommend remediation and mitigation approaches such as patching, upgrades, configuration hardening, and compensating controls
• Coordinate remediation progress to ensure timely delivery and provide technical and governance reports
• Oversee validation testing and confirm closure of remediation activities
• Provide data and commentary for regulatory, audit, and governance reporting including Risk Maps, KCIs, and KRIs

Hybrid work setup requiring presence 6 days per month from the office in Kraków.