Sii
Sii
New

Senior Application Vulnerability Management Consultant - Immediate Availability (f/m/x)

Brak informacji o wynagrodzeniu
SeniorFull-time·B2B·Umowa o pracę
#444633·Dodano 2 dni temu·0
Źródło: justjoin.it
Aplikuj teraz

Tech Stack / Keywords

VulnerabilitySoftware SecurityDevSecOpsSDLCCI/CD

Firma i stanowisko

Sii is hiring a Senior Application Vulnerability Management Analyst to join the team responsible for developing and operating the application vulnerability management process in a modern enterprise environment.

Wymagania

  • Minimum 5 years of experience in Cyber Security, Application Security, or Vulnerability Management
  • Practical knowledge of application vulnerability management and remediation processes
  • Previous experience with SAST, DAST, SCA, and platforms like Snyk
  • Strong knowledge of DevSecOps, SDLC, and CI/CD processes
  • Ability to assess risks using CVSS, EPSS, and business criteria
  • Experience working with Jira and coordinating efforts between technical teams
  • Familiarity with security process automation and reporting
  • Very good command of English at minimum B2 level

Obowiązki

  • Designing and maintaining application vulnerability management and remediation processes
  • Analyzing and prioritizing vulnerabilities based on risk criteria such as CVSS, EPSS, exploitability, application criticality, data sensitivity, and production exposure
  • Monitoring and classifying results from SAST, DAST, and Software Composition Analysis (SCA) tools
  • Coordinating remediation actions with development and DevOps teams, ensuring clear accountability
  • Creating and managing workflows, tickets, deadlines, and escalation paths in Jira for security findings
  • Tracking remediation SLAs, performing follow-ups on overdue vulnerabilities, and coordinating risk acceptance or exceptions when needed
  • Verifying remediation through rescans and validation before closure
  • Developing operational dashboards, KPIs, and management reports concerning risk exposure, aging vulnerabilities, and remediation performance
  • Automating security processes including ticket generation, responsibility assignment, notifications, SLA tracking, reporting, and rescanning
  • Driving continuous improvements in vulnerability management processes, automation capabilities, scanning coverage, and developer engagement

Inne informacje

Wyrażam zgodę na przetwarzanie moich danych osobowych zamieszczonych w niniejszym CV przez Sii sp. z o.o. z siedzibą przy Al. Niepodległości 69, 02-626 Warszawa („Sii”) dla celów procesów rekrutacyjnych prowadzonych przez Sii.

Sii

Sii

403 aktywne oferty

Zobacz wszystkie oferty
Aplikuj teraz