Senior Vulnerability Management Specialist

Groupe SII; Bezirk Olten; Vor Ort; CHF 120.000 - 170.000; Vollzeit

Benefits dieser Stelle

Great Place To Work

Zusammenfassung

SII Switzerland, a leading IT consulting and engineering services provider, seeks an experienced professional to manage end-to-end vulnerability management and remediation. You will prioritise risks, triage findings, coordinate with Dev/DevOps and drive remediation through Jira, CI/CD tooling and dashboards.

Join a collaborative, award-winning workplace with strong learning opportunities and a culture of autonomy and growth across Genève, Lausanne and Zürich.

Qualifikationen

• 5+ years of experience in Vulnerability Management, Application Security or DevSecOps.
• Proven experience managing enterprise vulnerability remediation and coordinating with Development/DevOps teams.
• Strong knowledge of SDLC, CI/CD, OWASP Top 10, CVE, CVSS, CWE and EPSS.
• Hands-on experience with Snyk or similar AppSec tools, Jira and CI/CD platforms (GitLab, GitHub, Azure DevOps).
• Experience with AWS/Terraform and regulated environments (NIS2, ISO 27001).
• Strong risk-based prioritization, stakeholder management, automation and communication skills.

Aufgaben

• Manage the end-to-end application vulnerability management and remediation process.
• Prioritize vulnerabilities based on risk, exploitability, application criticality and exposure.
• Triage SAST/DAST/SCA findings and assign remediation owners.
• Create and manage Jira tickets, SLAs, deadlines and escalations.
• Coordinate with developers to track remediation progress and risk exceptions.
• Validate remediation through rescanning and confirm vulnerability closure.
• Develop dashboards and reports on risk, aging and SLA performance.
• Automate ticketing, ownership, notifications, tracking and reporting processes.
• Continuously improve vulnerability coverage, remediation efficiency and developer experience.
• Ensure governance aligns with company standards, policies and procedures.

Kenntnisse

Vulnerability Management

Application Security

DevSecOps

SDLC

CI/CD

OWASP Top 10

CVE/CVSS/CWE/EPSS

Snyk or AppSec tools

Jira

GitLab/GitHub/Azure DevOps

AWS/Terraform

Tools

Jira

CI/CD platforms

Jobbeschreibung

• Manage the end-to-end application vulnerability management and remediation process.
• Prioritize vulnerabilities based on risk, exploitability, application criticality and exposure.
• Triage SAST/DAST/SCA findings and assign remediation owners.
• Create and manage Jira tickets, SLAs, deadlines and escalations.
• Coordinate with developers to track remediation progress and risk exceptions.
• Validate remediation through rescanning and confirm vulnerability closure.
• Develop dashboards and reports on risk, aging and SLA performance.
• Automate ticketing, ownership, notifications, tracking and reporting processes.
• Continuously improve vulnerability coverage, remediation efficiency and developer experience.
• Ensure governance aligns with company standards, policies and procedures.
• 5+ years of experience in Vulnerability Management, Application Security or DevSecOps.
• Proven experience managing enterprise vulnerability remediation and coordinating with Development/DevOps teams.
• Strong knowledge of SDLC, CI/CD, OWASP Top 10, CVE, CVSS, CWE and EPSS.
• Hands-on experience with Snyk or similar AppSec tools, Jira and CI/CD platforms (GitLab, GitHub, Azure DevOps).
• Experience with AWS/Terraform and regulated environments (NIS2, ISO 27001).
• Strong risk-based prioritization, stakeholder management, automation and communication skills.

• Manage the end-to-end application vulnerability management and remediation process.
• Prioritize vulnerabilities based on risk, exploitability, application criticality and exposure.
• Triage SAST/DAST/SCA findings and assign remediation owners.
• Create and manage Jira tickets, SLAs, deadlines and escalations.
• Coordinate with developers to track remediation progress and risk exceptions.
• Validate remediation through rescanning and confirm vulnerability closure.
• Develop dashboards and reports on risk, aging and SLA performance.
• Automate ticketing, ownership, notifications, tracking and reporting processes.
• Continuously improve vulnerability coverage, remediation efficiency and developer experience.
• Ensure governance aligns with company standards, policies and procedures.
• 5+ years of experience in Vulnerability Management, Application Security or DevSecOps.
• Proven experience managing enterprise vulnerability remediation and coordinating with Development/DevOps teams.
• Strong knowledge of SDLC, CI/CD, OWASP Top 10, CVE, CVSS, CWE and EPSS.
• Hands-on experience with Snyk or similar AppSec tools, Jira and CI/CD platforms (GitLab, GitHub, Azure DevOps).
• Experience with AWS/Terraform and regulated environments (NIS2, ISO 27001).
• Strong risk-based prioritization, stakeholder management, automation and communication skills.

At SII Switzerland, we stand out for our strong collaborative culture and recognized expertise in IT consulting and engineering services, supporting our clients in their digital transformation and innovation projects.

With a presence across three offices in Geneva, Lausanne, and Zurich, and a workforce of around 70 consultants, our teams contribute every day to creating a work environment that is stimulating and development-oriented, where expertise, teamwork, and initiative are valued.

For the third consecutive year, SII Switzerland has been certified Great Place To Work and ranked among the Best Workplaces in "Suisse Romande", demonstrating our strong commitment to our employees and the quality of our practices.

True to our human-centered values, we are committed to supporting continuous learning and building strong relationships with our local ecosystem and partners.

Joining SII Switzerland means taking part in a collective adventure guided by our promise “Let’s Tech Together,” and helping to build a technological future that is innovative, sustainable, and responsible, at the heart of an environment that values autonomy, collaboration, and professional growth.

Who are we?

SII Group is an international provider of digital services, engineering, and technology consulting. Operating in 21 countries, we support our clients in their innovation and digital transformation projects.

Joining SII means becoming part of a collective adventure: Let’s Tech Together! This promise reflects our shared ambition: to build the technological future together, in an environment where experimentation and autonomy are encouraged, where innovation is at the heart of everything we do, and where every employee can achieve professional fulfilment and take ownership of their responsibilities within an enthusiastic and inclusive team.

Let’s Tech Together embodies who we are and who we aspire to be: a dynamic, innovative, and people-focused company. So, if these values resonate with you, join us!