Назад
Company hidden
1 день назад

Sr Cybersecurity Analyst

Формат работы
onsite
Тип работы
fulltime
Грейд
senior
Английский
c1
Страна
Portugal
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Sr Cybersecurity Analyst (Vulnerability and Exposure Management): Managing vulnerability, external attack surface, CTEM, and penetration testing capabilities with an accent on risk-based prioritization, remediation governance, and exposure validation. Focus on correlating threat intelligence with exposure data, handling complex and zero-day findings, and reporting business-critical cyber risk to senior leadership.

Location: Porto Salvo, Portugal

Employment: Full time

Company

hirify.global provides clinical research services, commercial insights, and healthcare intelligence for the life sciences and healthcare industries.

What you will do

  • Manage Vulnerability Management, External Attack Surface Management, and CTEM operations from asset discovery and scanning through risk-based prioritization, remediation tracking, and closure validation.
  • Lead analysts within the area of responsibility and act as the escalation point for complex, contested, and zero-day exposures.
  • Develop and implement governance, including standard operating procedures, remediation SLAs, risk-acceptance and exception workflows, and KPIs.
  • Control the penetration testing program by defining scope and rules of engagement, coordinating testers, reviewing reports, and driving remediation and retesting.
  • Correlate threat intelligence with internal and external exposure data and provide exposure risk reporting to senior leadership.

Requirements

  • Bachelor's degree in Computer Science or a related field, or equivalent experience.
  • At least 5 years of related work experience, including 3 years in vulnerability or exposure management.
  • Fluent written and spoken English.
  • Hands-on experience with Vulnerability Management and risk-based VM platforms, EASM, Exposure Management or CTEM platforms, TIP, CSPM or CNAPP, BAS or other exposure validation tools, and ITSM and CMDB remediation workflows.
  • Strong knowledge of CVSS, EPSS, known-exploited vulnerability catalogs, MITRE ATT&CK, and OWASP Top 10.
  • Working knowledge of at least one major public cloud provider, networking, Windows, and Linux.
  • CISSP, CISM, and CRISC certifications.

Nice to have

  • Equivalent work experience in place of a degree.
  • Scripting or API automation with Python or PowerShell, and experience with data reporting or BI tools.
  • Technical certification such as GIAC, OSCP, CompTIA PenTest+, or a cloud security certification.

Culture & Benefits

  • Work in a global life sciences and healthcare organization focused on improving patient outcomes and population health.
  • Culture centered on integrity, diversity, inclusion, belonging, and equality.
  • All application information and credentials must be truthful and complete; fraud or material omissions result in disqualification or termination.

Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →