Назад
Company hidden
7 дней назад

Senior Security Analyst - Threat and Vulnerability Management (Cybersecurity)

Формат работы
hybrid
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
Poland
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Security Analyst - Threat and Vulnerability Management (Cybersecurity): Identifying, assessing, prioritizing, and communicating vulnerabilities across enterprise endpoints, servers, networks, cloud assets, and security platforms with an accent on threat intelligence, automation, and coordinated remediation. Focus on correlating threat and vulnerability data, building automated detection and remediation workflows, analyzing exploit behavior, and presenting risk to technical and executive stakeholders.

Location: Warsaw, Poland; hybrid work model with remote work up to two days per week and regular office presence.

Company

hirify.global operates global IT and product supply organizations with multifunctional teams across several locations.

What you will do

  • Assess vulnerabilities across endpoints, servers, networks, and cloud assets using advanced tools and techniques.
  • Monitor threats and vulnerabilities continuously using threat intelligence feeds and automated tools.
  • Lead automation and orchestration initiatives for vulnerability detection, reporting, and remediation workflows.
  • Coordinate with security, infrastructure, development, application-owner, patching, threat intelligence, and threat-hunting teams to validate findings and manage remediation.
  • Correlate threat intelligence with vulnerability, asset, network, and incident data to prioritize risks.
  • Prepare actionable risk and vulnerability reports for technical, non-technical, and executive stakeholders; mentor junior analysts.

Requirements

  • Bachelor’s degree or above in Computer Science, Cyber Security, or a related field, or equivalent practical experience.
  • 3+ years of experience in Cyber Defense, with strong emphasis on vulnerability management, threat intelligence, incident response, or offensive security.
  • Proven experience in a vulnerability management role or cyber defense team, including understanding of the vulnerability management lifecycle and relevant frameworks.
  • Strong ability to correlate threat intelligence with vulnerability, asset management, network, and incident data for effective risk prioritization.
  • Excellent communication skills for explaining complex technical information to technical, non-technical, and executive stakeholders.
  • Advanced scripting skills in Python, Bash, PowerShell, or equivalent, plus experience with API integration, automation, and security tools.
  • Ability to collaborate with SOC analysts, application owners, patching teams, and security leaders to mitigate security threats.
  • Deep technical knowledge of complex vulnerability analysis, exploit-code properties and behavior, countermeasures, and mitigation strategies.
  • Knowledge of vulnerability management platforms, vulnerability data modeling, workflows, vulnerability scanning and troubleshooting for networks and endpoints, IPS/IDS, security protocols, Windows, Unix, Linux, log analysis and correlation, and the security threat landscape.

Culture & Benefits

  • Project ownership and autonomy from day one.
  • Dynamic work environment with an emphasis on initiative, agility, work-life balance, inclusion, and equal opportunity.
  • Ongoing mentoring, coaching, corporate training, functional training, and certification opportunities including ITIL, DevOps, and Microsoft portfolio certifications.
  • Private healthcare, sport cards, an in-office fitness center, stock options, savings plans, lunch subsidy, regular salary increases, and possible promotions.
  • Flexible work arrangements and access to global, multifunctional teams across several continents.
  • Full-time employment exclusively under an Umowa o Pracę employment contract.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →