Security Engineer

buscojobs España; Valladolid; Presencial; EUR 40.000 - 80.000; Jornada completa

Descripción de la vacante

Una empresa innovadora busca un Ingeniero de Seguridad Senior para identificar y mitigar vulnerabilidades en sistemas y redes. En esta emocionante posición, serás responsable de realizar evaluaciones técnicas, definir requisitos de seguridad y colaborar con equipos multifuncionales para implementar medidas de seguridad efectivas. Tu experiencia en gestión de vulnerabilidades y herramientas de escaneo será clave para proteger la infraestructura de la organización. Si te apasiona la ciberseguridad y deseas contribuir a un entorno seguro, esta oportunidad es ideal para ti.

Formación

• 3+ años de experiencia en gestión de vulnerabilidades y monitoreo de amenazas.
• Conocimientos avanzados en herramientas de escaneo de vulnerabilidades.

Responsabilidades

• Realizar escaneos de vulnerabilidades y evaluaciones en sistemas y redes.
• Colaborar con equipos de TI para facilitar la remediación de vulnerabilidades.

Conocimientos

Trabajo en equipo

Habilidades analíticas

Resolución de problemas

Gestión del tiempo

Comunicación en inglés

Educación

Licenciatura en Ciencias de la Computación

Licenciatura en Ciberseguridad

Herramientas

Nessus

Qualys

Rapid7

Invicti

Descripción del empleo

The Senior Security Engineer plays a role in identifying, assessing and mitigating vulnerabilities in the organization's systems, networks, and applications. This role involves conducting comprehensive technical assessments, defining security requirements for new systems, and integrating security measures throughout the system development lifecycle. The Senior Security Engineer will collaborate closely with cross-functional teams to implement appropriate measures and protect our systems from potential threats.

Key Accountabilities

• Conduct vulnerability scans and assessments across systems, applications, and networks using automated tools and manual techniques.
• Analyze scan results, prioritize vulnerabilities based on risk and impact, and provide actionable recommendations for remediation.
• Maintain an up-to-date inventory of vulnerabilities and the status of remediation efforts.
• Design and automate processes for vulnerability management and threat intelligence to ensure that the current risk situation is being monitored continuously.
• Develop and maintain documentation for vulnerability management processes, including policies, procedures, and reporting.
• Drive actionable metrics and reporting for operations and leadership transparency.
• Stay current with emerging threats, vulnerabilities, and security trends to provide informed recommendations.
• Prepare and present vulnerability management reports to stakeholders, including risk assessments and compliance status.
• Assist in incident response activities as needed, particularly related to vulnerabilities and exploits.
• Participate in security awareness training and promote best practices within the organization.

Networking / Key relationships

• Collaborate with IT teams and stakeholders to track and facilitate the remediation of identified vulnerabilities.
• Facilitate communication and coordination between internal teams and external vendors to ensure timely resolution of identified vulnerabilities.
• Build strong partnerships with technical teams to promote best practices for managing vulenrabilites.

Minimum Knowledge & Experience required for the position :

• Bachelor's degree in Computer Science, Cybersecurity or related field.
• A minimum of 3 years of proven experience in vulnerability management or / and threat monitoring.
• Advanced experience with vulnerability scanning tools and other security testing tools (e.G., Nessus, Qualys, Rapid7, Invicti).
• Proven record of automation for vulnerability orchestration processes.
• Practical knowledge of threat modeling and threat hunting.
• Solid knowledge of web application security threats.
• Knowledge of security frameworks and standards (e.G., NIST, ISO 27001, CIS Controls, HIPPA) is a plus.
• Certifications in cybersecurity area (e.G., CISSP, CISM, CEH, CompTIA Security+) are a plus.

Skills & Capabilities :

• Teamwork and collaboration
• Strong analytical and problem-solving skills with attention to detail
• Ability to work independently managing assigned projects
• Adaptable to change
• lntegrity and trust
• Time management
• Fluent English in verbal and written communication