Senior Application Vulnerability Management Consultant - Immediate Availability (f/m/x)
Brak informacji o wynagrodzeniu
SeniorFull-time·B2B·Umowa o pracę
#444633·Dodano 2 dni temu·0
Źródło: justjoin.itTech Stack / Keywords
VulnerabilitySoftware SecurityDevSecOpsSDLCCI/CD
Firma i stanowisko
Sii is hiring a Senior Application Vulnerability Management Analyst to join the team responsible for developing and operating the application vulnerability management process in a modern enterprise environment.
Wymagania
- Minimum 5 years of experience in Cyber Security, Application Security, or Vulnerability Management
- Practical knowledge of application vulnerability management and remediation processes
- Previous experience with SAST, DAST, SCA, and platforms like Snyk
- Strong knowledge of DevSecOps, SDLC, and CI/CD processes
- Ability to assess risks using CVSS, EPSS, and business criteria
- Experience working with Jira and coordinating efforts between technical teams
- Familiarity with security process automation and reporting
- Very good command of English at minimum B2 level
Obowiązki
- Designing and maintaining application vulnerability management and remediation processes
- Analyzing and prioritizing vulnerabilities based on risk criteria such as CVSS, EPSS, exploitability, application criticality, data sensitivity, and production exposure
- Monitoring and classifying results from SAST, DAST, and Software Composition Analysis (SCA) tools
- Coordinating remediation actions with development and DevOps teams, ensuring clear accountability
- Creating and managing workflows, tickets, deadlines, and escalation paths in Jira for security findings
- Tracking remediation SLAs, performing follow-ups on overdue vulnerabilities, and coordinating risk acceptance or exceptions when needed
- Verifying remediation through rescans and validation before closure
- Developing operational dashboards, KPIs, and management reports concerning risk exposure, aging vulnerabilities, and remediation performance
- Automating security processes including ticket generation, responsibility assignment, notifications, SLA tracking, reporting, and rescanning
- Driving continuous improvements in vulnerability management processes, automation capabilities, scanning coverage, and developer engagement
Inne informacje
Wyrażam zgodę na przetwarzanie moich danych osobowych zamieszczonych w niniejszym CV przez Sii sp. z o.o. z siedzibą przy Al. Niepodległości 69, 02-626 Warszawa („Sii”) dla celów procesów rekrutacyjnych prowadzonych przez Sii.
Sii
418 aktywnych ofert