Remote Senior Application Security & Vulnerability Specialist

SII Group Switzerland; Bezirk Olten; Remote; CHF 110.000 - 160.000; Vollzeit

Zusammenfassung

SII Group Switzerland is seeking a Senior Vulnerability Management Specialist to join our security-focused team. This role centers on managing end-to-end vulnerability management and remediation, prioritizing risks, and coordinating with DevOps to drive timely fixes.

Responsibilities include triaging SAST/DAST/SCA findings, creating Jira tickets with SLAs, and validating remediation through rescans. Strong stakeholder management and a deep understanding of OWASP Top 10, CVE, and CI/CD are

Qualifikationen

• 5+ years of experience in Vulnerability Management, Application Security or DevSecOps.
• Experience coordinating with Development/DevOps teams.
• Strong knowledge of SDLC, CI/CD, OWASP Top 10, CVE, CVSS, CWE and EPSS.

Aufgaben

• Manage the end-to-end application vulnerability management and remediation process.
• Prioritize vulnerabilities based on risk, exploitability, application criticality and exposure.
• Triage SAST/DAST/SCA findings and assign remediation owners.
• Create and manage Jira tickets, SLAs, deadlines and escalations.
• Coordinate with developers to track remediation progress and risk exceptions.
• Validate remediation through rescanning and confirm vulnerability closure.
• Develop dashboards and reports on risk, aging and SLA performance.
• Automate ticketing, ownership, notifications, tracking and reporting processes.
• Continuously improve vulnerability coverage, remediation efficiency and developer experience.
• Ensure governance aligns with company standards, policies and procedures.

Kenntnisse

Vulnerability Management

Application Security

DevSecOps

Stakeholder management

Tools

Snyk

Jira

GitLab

GitHub

Azure DevOps

AWS

Terraform

Jobbeschreibung

SII Group Switzerland is seeking a Senior Vulnerability Management Specialist to join our security-focused team. This role centers on managing end-to-end vulnerability management and remediation, prioritizing risks, and coordinating with DevOps to drive timely fixes.

Responsibilities include triaging SAST/DAST/SCA findings, creating Jira tickets with SLAs, and validating remediation through rescans. Strong stakeholder management and a deep understanding of OWASP Top 10, CVE, and CI/CD are