Vulnerability Management Senior Specialist – Cybersecurity

The role is with a client in the financial industry, focused on digital asset protection and cybersecurity improvement. The position is Krakow-based with a hybrid work model, involving up to 4 remote days per week.

• At least 5 years of experience in IT Security or a comparable role.
• Expertise assessing critical/high-severity vulnerabilities from sources like NIST/NVD.
• Understanding of vulnerability types and attack techniques such as remote code execution, privilege escalation, authentication bypass.
• Hands-on experience with vulnerability detection tools including Tenable, SAST, DAST.
• Knowledge of CI/CD pipeline integration of security testing and remediation.
• Technical foundation in networking and application delivery including WAFs, TLS, load balancers, and cloud/on-prem architectures.
• Practical remediation experience including patching, upgrades, configuration hardening, and controls.
• Excellent stakeholder management skills.
• Advanced written communication skills for technical reports.
• Experience in Cybersecurity Operations, Risk Management, and Governance within large or enterprise organizations.
• Ability to work remotely with a minimum of 6 days per month in the office.

Nice to have:

• Certifications such as CISSP, CISA, GISF, or equivalent.
• Experience with cloud security frameworks such as AWS and Azure.

• Review critical and high-severity vulnerabilities from sources such as NIST/NVD and vendor advisories.
• Validate vulnerability findings with technical evidence.
• Map vulnerabilities to assets and coordinate with service owners.
• Recommend remediation strategies including patches, upgrades, configuration hardening, and controls.
• Produce technical reports detailing root cause, attack vectors, business impact, and remediation steps.
• Collaborate with infrastructure, platform, and application teams for remediation activities.
• Track remediation progress, update statuses, and escalate delays or risks.
• Verify remediation effectiveness through re-scans and validation testing.
• Contribute to regulatory, internal, and external audit interactions.
• Handle ad hoc tasks including operational support and escalation management.

Only candidates with existing legal right to work in the European Union will be considered for this role.