Вакансия из Hirify Global, списка международных tech-компаний Для мэтча и отклика нужен Plus
Пожаловаться
79
Хорошая вакансия
развернуть
У роли понятная зона ответственности для senior-специалиста, но широкий набор обязательных инструментов и сразу три сертификата могут заметно сузить круг подходящих возможностей.
Кликните для подробной информации
Жёсткие требованияПонятная зона ответственностиВклад в здравоохранениеРабота на месте
Оценка от Hirify AI
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Подключить Plus
Описание вакансии
Текст:
Hirify AI/Оригинал
TL;DR
Sr Cybersecurity Analyst (Vulnerability and Exposure Management): Managing vulnerability, external attack surface, CTEM, and penetration testing capabilities with an accent on risk-based prioritization, remediation governance, and exposure validation. Focus on correlating threat intelligence with exposure data, handling complex and zero-day findings, and reporting business-critical cyber risk to senior leadership.
Location: Porto Salvo, Portugal
Employment: Full time
Company
hirify.global provides clinical research services, commercial insights, and healthcare intelligence for the life sciences and healthcare industries.
What you will do
Manage Vulnerability Management, External Attack Surface Management, and CTEM operations from asset discovery and scanning through risk-based prioritization, remediation tracking, and closure validation.
Lead analysts within the area of responsibility and act as the escalation point for complex, contested, and zero-day exposures.
Develop and implement governance, including standard operating procedures, remediation SLAs, risk-acceptance and exception workflows, and KPIs.
Control the penetration testing program by defining scope and rules of engagement, coordinating testers, reviewing reports, and driving remediation and retesting.
Correlate threat intelligence with internal and external exposure data and provide exposure risk reporting to senior leadership.
Requirements
Bachelor's degree in Computer Science or a related field, or equivalent experience.
At least 5 years of related work experience, including 3 years in vulnerability or exposure management.
Fluent written and spoken English.
Hands-on experience with Vulnerability Management and risk-based VM platforms, EASM, Exposure Management or CTEM platforms, TIP, CSPM or CNAPP, BAS or other exposure validation tools, and ITSM and CMDB remediation workflows.
Strong knowledge of CVSS, EPSS, known-exploited vulnerability catalogs, MITRE ATT&CK, and OWASP Top 10.
Working knowledge of at least one major public cloud provider, networking, Windows, and Linux.
CISSP, CISM, and CRISC certifications.
Nice to have
Equivalent work experience in place of a degree.
Scripting or API automation with Python or PowerShell, and experience with data reporting or BI tools.
Technical certification such as GIAC, OSCP, CompTIA PenTest+, or a cloud security certification.
Culture & Benefits
Work in a global life sciences and healthcare organization focused on improving patient outcomes and population health.
Culture centered on integrity, diversity, inclusion, belonging, and equality.
All application information and credentials must be truthful and complete; fraud or material omissions result in disqualification or termination.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →