Mid-Level Vulnerability Management Specialist – Cybersecurity & AI Integration

Our client is a leading global financial institution committed to strengthening cybersecurity resilience through innovative AI solutions.

• At least 2 years of experience in threat & vulnerability management, cybersecurity, or related fields.
• Strong understanding of Large Language Models (LLMs), inference concepts, and practical AI applications.
• Knowledge of Attack Surface Management and attack vectors.
• Proficiency with AI tools such as Claude, Frontier models, Copilot.
• Experience with cloud technologies.
• Familiarity with collaboration tools: Teams, JIRA, ServiceNow, SharePoint, GitHub, Confluence.
• Deep understanding of security standards and sources: CVEs, CWEs, CISA, NVD, MITRE, CVSS.
• Excellent stakeholder management and communication skills, capable of producing senior management-ready updates.
• Ability to work accurately under pressure with sound judgment and decision-making.
• High ethical standards and integrity.

Nice to have:

• Business analyst skills.
• Direct experience in Vulnerability Management Operations or Vulnerability Assessment.

• Utilize Claude, GitHub Copilot, and other AI tools to enhance delivery efficiency and productivity.
• Apply understanding of the NIST AI Risk Management Framework and agent/harness fundamentals for repeatable workflow automation.
• Implement strong data analytics to generate actionable insights, improve prioritization, and enhance reporting.
• Support vulnerability growth initiatives driven by Frontier AI models, tracking remediation end-to-end within central planning platforms.
• Identify gaps in vulnerability management operating models and define uplift plans, roadmaps, and future states.
• Seek opportunities to utilize automation and AI to streamline vulnerability assessment and remediation processes.
• Monitor operational channels, triage issues, and coordinate updates with Cybersecurity Engineering and stakeholders.
• Engage with Red Team activities to reinforce remediation strategies and improve resilience.
• Respond promptly to emerging threats with relevant intelligence and analysis.
• Conduct application security scanning aligned with attacker TTPs and manage false positives via global mitigation efforts.
• Lead stakeholder consultations, bridging technical and non-technical perspectives, ensuring understanding of requirements.
• Support internal/external audits and regulatory responses with comprehensive and well-documented evidence.

Only candidates with an existing legal right to work in the European Union will be considered for this role.