Mid-Level Vulnerability Remediation Engineer – Cybersecurity & Cloud

This role is offered by a global leader in cybersecurity and cloud solutions. The position is based in Krakow, Poland, and follows a hybrid work model.

• At least 3 years of hands-on experience supporting CI/CD pipelines with Jenkins and GitHub, including troubleshooting and operational support.
• Proven scripting/automation skills with Python, Bash, PowerShell, and/or Groovy.
• Strong ability to work across teams to build and implement tooling solutions from requirements through rollout.
• Fluent spoken and written English with excellent communication and problem-solving skills.

Nice to have:

• Self-motivation, a positive mindset, and a commitment to continuous learning.
• Relevant experience in infrastructure or security engineering, particularly in vulnerability remediation roles.
• Passion and knowledge of emerging AI tools, frameworks, and integration of LLMs (e.g., OpenAI, Anthropic) through APIs/SDKs to enhance workflows.

• Triage and validate vulnerability findings from scanning tools and advisories, confirming their real-world impact.
• Own remediation delivery from initial finding to resolution, including planning, executing changes, and verifying fixes.
• Drive vulnerability remediation activities across OS, middleware, applications, containers, and cloud services, ensuring timely and safe fixes.
• Prioritise remediation work based on risk context, and clearly communicate plans, status updates, and blockers to stakeholders.
• Coordinate change execution with technology teams, managing dependencies and minimizing service disruptions.
• Troubleshoot remediation issues, identify root causes, and address failed patches or conflicts.
• Create and maintain remediation runbooks, SOPs, and repeatable patterns to streamline processes and reduce recurrence.
• Track remediation performance metrics and support continuous process improvements.
• Collaborate closely with security and platform teams to improve scan quality, reduce false positives, and optimize vulnerability lifecycle management.

Only candidates with an existing legal right to work in the European Union will be considered.