Senior Vulnerability Management Specialist

Groupe SII; Lavamünd; Hybrid; EUR 70.000 - 110.000; Vollzeit

Zusammenfassung

Groupe SII is seeking a Senior Vulnerability Management professional to lead end-to-end application vulnerability management and remediation. You will prioritize risks, triage findings, and coordinate with Developers and DevOps to drive fixes across SDLC.

You will create dashboards, manage Jira SLAs, and automate ticketing and reporting while ensuring governance aligns with ISO 27001/NIS2 standards. Strong communication and automation skills are essential.

Qualifikationen

• 5+ years of experience in Vulnerability Management, Application Security or DevSecOps.
• Proven experience managing enterprise vulnerability remediation and coordinating with Development/DevOps teams.
• Strong knowledge of SDLC, CI/CD, OWASP Top 10, CVE, CVSS, CWE and EPSS.
• Hands-on experience with Snyk or similar AppSec tools, Jira and CI/CD platforms (GitLab, GitHub, Azure DevOps).
• Experience with AWS/Terraform and regulated environments (NIS2, ISO 27001).
• Strong risk-based prioritization, stakeholder management, automation and communication skills.

Aufgaben

• Manage the end-to-end application vulnerability management and remediation process.
• Prioritize vulnerabilities based on risk, exploitability, application criticality and exposure.
• Triage SAST/DAST/SCA findings and assign remediation owners.
• Create and manage Jira tickets, SLAs, deadlines and escalations.
• Coordinate with developers to track remediation progress and risk exceptions.
• Validate remediation through rescanning and confirm vulnerability closure.
• Develop dashboards and reports on risk, aging and SLA performance.
• Automate ticketing, ownership, notifications, tracking and reporting processes.
• Continuously improve vulnerability coverage, remediation efficiency and developer experience.

Kenntnisse

Vulnerability management

Application security

DevSecOps

Risk-based prioritization

Stakeholder management

Automation

Communication skills

Tools

Snyk

Jira

GitLab

GitHub

Azure DevOps

AWS

Terraform

Jobbeschreibung

• Manage the end-to-end application vulnerability management and remediation process.
• Prioritize vulnerabilities based on risk, exploitability, application criticality and exposure.
• Triage SAST/DAST/SCA findings and assign remediation owners.
• Create and manage Jira tickets, SLAs, deadlines and escalations.
• Coordinate with developers to track remediation progress and risk exceptions.
• Validate remediation through rescanning and confirm vulnerability closure.
• Develop dashboards and reports on risk, aging and SLA performance.
• Automate ticketing, ownership, notifications, tracking and reporting processes.
• Continuously improve vulnerability coverage, remediation efficiency and developer experience.
• Ensure governance aligns with company standards, policies and procedures.

• 5+ years of experience in Vulnerability Management, Application Security or DevSecOps.
• Proven experience managing enterprise vulnerability remediation and coordinating with Development/DevOps teams.
• Strong knowledge of SDLC, CI/CD, OWASP Top 10, CVE, CVSS, CWE and EPSS.
• Hands-on experience with Snyk or similar AppSec tools, Jira and CI/CD platforms (GitLab, GitHub, Azure DevOps).
• Experience with AWS/Terraform and regulated environments (NIS2, ISO 27001).
• Strong risk-based prioritization, stakeholder management, automation and communication skills.

At SII Switzerland, we stand out for our strong collaborative culture and recognized expertise in IT consulting and engineering services, supporting our clients in their digital transformation and innovation projects.

With a presence across three offices in Geneva, Lausanne, and Zurich, and a workforce of around 70 consultants, our teams contribute every day to creating a work environment that is stimulating and development-oriented, where expertise, teamwork, and initiative are valued.

For the third consecutive year, SII Switzerland has been certified Great Place To Work and ranked among the Best Workplaces in "Suisse Romande", demonstrating our strong commitment to our employees and the quality of our practices.

True to our human-centered values, we are committed to supporting continuous learning and building strong relationships with our local ecosystem and partners.

Joining SII Switzerland means taking part in a collective adventure guided by our promise“Let’s Tech Together,” and helping to build a technological future that is innovative, sustainable, and responsible, at the heart of an environment that values autonomy, collaboration, and professional growth.