Senior AppSec Vulnerability & Remediation Lead

Groupe SII; Lavamünd; Vor Ort; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Groupe SII is seeking a Senior Vulnerability Management professional to lead end-to-end application vulnerability management and remediation. You will prioritize risks, triage findings, and coordinate with Developers and DevOps to drive fixes across SDLC.

You will create dashboards, manage Jira SLAs, and automate ticketing and reporting while ensuring governance aligns with ISO 27001/NIS2 standards. Strong communication and automation skills are essential.

Qualifikationen

• 5+ years of experience in Vulnerability Management, Application Security or DevSecOps.
• Proven experience managing enterprise vulnerability remediation and coordinating with Development/DevOps teams.
• Strong knowledge of SDLC, CI/CD, OWASP Top 10, CVE, CVSS, CWE and EPSS.
• Hands-on experience with Snyk or similar AppSec tools, Jira and CI/CD platforms (GitLab, GitHub, Azure DevOps).
• Experience with AWS/Terraform and regulated environments (NIS2, ISO 27001).
• Strong risk-based prioritization, stakeholder management, automation and communication skills.

Aufgaben

• Manage the end-to-end application vulnerability management and remediation process.
• Prioritize vulnerabilities based on risk, exploitability, application criticality and exposure.
• Triage SAST/DAST/SCA findings and assign remediation owners.
• Create and manage Jira tickets, SLAs, deadlines and escalations.
• Coordinate with developers to track remediation progress and risk exceptions.
• Validate remediation through rescanning and confirm vulnerability closure.
• Develop dashboards and reports on risk, aging and SLA performance.
• Automate ticketing, ownership, notifications, tracking and reporting processes.
• Continuously improve vulnerability coverage, remediation efficiency and developer experience.

Kenntnisse

Vulnerability management

Application security

DevSecOps

Risk-based prioritization

Stakeholder management

Automation

Communication skills

Tools

Snyk

Jira

GitLab

GitHub

Azure DevOps

AWS

Terraform

Jobbeschreibung

Groupe SII is seeking a Senior Vulnerability Management professional to lead end-to-end application vulnerability management and remediation. You will prioritize risks, triage findings, and coordinate with Developers and DevOps to drive fixes across SDLC.

You will create dashboards, manage Jira SLAs, and automate ticketing and reporting while ensuring governance aligns with ISO 27001/NIS2 standards. Strong communication and automation skills are essential.