Security Remediation Expert

The position is for a Security Remediation Specialist focused on vulnerability management within a large Nordic bank, aiming to reduce its security risk exposure by leading remediation and risk scoring initiatives.

• 3+ years of hands-on experience in security domains, especially security findings assessment and remediation
• Expert-level knowledge of vulnerability scoring frameworks, security risk assessment methodologies and governance processes for severity, prioritisation, and remediation timelines
• Deep understanding of modern AI threats and their impact on security posture
• Knowledge and experience in problem management, Secure DevOps, DORA, and OWASP
• Advanced troubleshooting and conceptual skills to find solutions to uncommon remediation problems
• Ability to interpret and communicate results using exploratory data analysis and statistical modelling techniques
• Good understanding of the risk-based approach and risk management
• Experience in cross-organisational collaboration and negotiation
• Ability to prepare and deliver presentations to stakeholders on remediation progress, risks, and strategic recommendations
• Fluent business and technical English (written and spoken)
• Demonstrated experience in automation, preferably using Python, Apache Airflow, and/or Power Automate
• Practical application of AI technologies in governance processes and automation workflows
• Ability to mentor team members and share knowledge across the security function

• Lead the identification of remediation gaps and drive strategic resolution initiatives across the organisation
• Provide expert guidance to stakeholders on remediation strategies, ensuring alignment with security best practices and regulatory expectations
• Analyse complex scanning results and define actionable steps that reduce the bank's risk exposure
• Collaborate cross-functionally with accountable and responsible remediation owners to ensure timely and effective execution
• Ensure security findings are clearly understood and that remediation progresses at an appropriate pace
• Maintain a proactive governance approach and influence remediation outcomes
• Contribute to the design of risk scoring that enables near real-time, risk-based prioritisation and faster remediation of critical vulnerabilities

Location: Tricity / Warsaw / Łódź - hybrid with 3 days at the office required