Vulnerability Management Engineer & Ops Senior Manager

At Grant Thornton Capability Center Poland (GTCC), employees contribute to meaningful work supporting operations of a growing multinational platform. GTCC supports the operations of the Grant Thornton Advisors multinational platform, connecting over 25,000 professionals across 20+ firms. Employees work across countries, markets, and time zones on complex projects with advanced technologies, emphasizing collaboration, accountability, and quality.

• 10–12 years of experience in vulnerability management, cybersecurity, or related information security roles.
• Practical experience with Wiz, Qualys, including vulnerability scanning, secure configuration assessment, and policy compliance modules.
• Working knowledge of Wiz UVM and other comparable CSPM solutions for cloud vulnerability and misconfiguration management.
• Hands-on experience integrating vulnerability management platforms with SIEM, ITSM, and patch management solutions.
• Strong understanding of Windows and Linux operating systems, networking fundamentals, and cloud platforms including AWS, Azure, and GCP.
• Solid knowledge of CVSS scoring, risk-based vulnerability prioritization, and remediation methodologies.
• Familiarity with AI tools, workflow automation platforms, and integrating AI into existing systems is preferred.
• Fluency in Polish and English.

Preferred Qualifications:

• Experience developing automation using Copilot or other Agentic AI frameworks.
• Industry certifications such as Qualys Certified Specialist, Wiz Certified Professional, CISSP, CEH, or CompTIA Security+ are highly desirable.

• Administer and enhance the organization's vulnerability management program, ensuring vulnerabilities are identified, assessed, and remediated across on-premises, cloud, and hybrid infrastructures.
• Execute vulnerability assessments, secure configuration reviews, and policy compliance scans using Wiz, Qualys, and related security tools.
• Investigate, prioritize, and remediate vulnerabilities identified by Qualys, Wiz, and other Cloud Security Posture Management (CSPM) platforms.
• Generate actionable vulnerability reports for patch management teams for timely remediation.
• Partner with relevant teams to prioritize remediation activities based on business risk and compliance requirements.
• Experience in patch management, creating patch jobs, and coordinating patch management processes.
• Integrate vulnerability management solutions with SIEM, ITSM, and other platforms to improve operational efficiency.
• Create and maintain dashboards, reports, and security metrics for leadership, compliance, and audit purposes.
• Monitor emerging security threats, newly disclosed vulnerabilities, and industry best practices to improve processes.
• Assist with compliance initiatives including PCI-DSS, ISO 27001, and SOC 2 by providing assessments and compliance reporting.
• Design and implement AI-powered automation solutions to streamline workflows and automate repetitive business processes.