Starszy/-a Specjalista/-ka ds. Cyberbezpieczeństwa

UNIQA is one of the largest insurance groups in Poland, ranking 6th in the market. They have over 30 years of operation in Poland, focusing on health, life, and property insurance, and supporting clients to live better and safer.

• Minimum 3 years of experience in cybersecurity, especially in vulnerability management, infrastructure, or application security.
• Experience with Tenable or similar Vulnerability Management platforms.
• Understanding of key cybersecurity domains such as IT asset security, identity management, and cryptography.
• Knowledge of secure configuration standards for IT systems, notably Linux, Windows, web servers, databases, and telecom networks.
• Experience working with public cloud platforms, preferably Microsoft Azure and Google Cloud Platform.
• Ability to effectively communicate technical topics to both IT specialists and non-technical audiences.
• Experience integrating Vulnerability Management tools with CMDB, ticketing systems, SIEM, reporting platforms, and automation solutions is a plus.
• Familiarity with automation and scripting tools such as Python, PowerShell, API, or SQL is desirable.
• Experience in penetration testing, technical vulnerability verification, security architecture review, and implementing security by design requirements is advantageous.
• Knowledge of financial sector regulations and cybersecurity certifications such as CompTIA, ISC2, or vendor-specific certificates is a bonus.

• Manage and develop the vulnerability management process from identification and analysis to remediation.
• Operate the vulnerability scanning platform, configure policies, scanning scopes and schedules, and verify results.
• Translate technical topics into business-understandable language and recommend remediation actions.
• Collaborate with IT teams and vendors to remediate vulnerabilities, monitor actions, exceptions, risk acceptance, and remediation effectiveness.
• Coordinate penetration tests performed by external companies, including scope definition, result validation, remediation supervision, and retest organization.
• Prepare reports and process metrics, and support security architecture and IT project reviews according to security by design principles.