Senior Vulnerability & Patch Management Consultant

Pasiona; Madrid; Híbrido; EUR 45.000 - 70.000; Jornada completa

Descripción de la vacante

Pasiona busca un(a) especialista en seguridad para liderar la implementación de Patch Management y la gestión de vulnerabilidades en entornos empresariales. Colaborarás con seguridad, arquitectura, producto y operaciones para ejecutar PoCs, despliegues y mejoras continuas.

Serás responsable de configurar y optimizar Qualys (incluyendo CAR), crear dashboards y reportes, documentar integraciones y apoyar transiciones hacia un enfoque integral de gestión de parches y riesgos.

Formación

• Amplia experiencia en entornos IT y herramientas de ciberseguridad.
• Conocimiento de buenas prácticas de seguridad de datos.
• Experiencia práctica con plataformas ITSM, especialmente ServiceNow.
• Experiencia con herramientas de gestión de vulnerabilidades como Qualys, Tenable, Nexpose o Kenna.
• Experiencia con plataformas de parcheo como Qualys o Ivanti.
• Experiencia creando dashboards, KPIs y marcos de reporting.
• Con habilidades de scripting en PowerShell y Python.
• Capacidad para documentar integraciones técnicas y discutir arquitecturas.

Responsabilidades

• Ejecutar PoCs y despliegues técnicos de Patch Management.
• Configurar y optimizar la plataforma Qualys, incluyendo CAR y dashboards.
• Soportar la evolución de Vulnerability Management hacia Patch Management.
• Producir documentación técnica y de gobernanza.
• Documentar flujos de integración de datos y participar en revisiones de arquitectura.
• Integrar y gestionar activos entre seguridad y gestión de vulnerabilidades.
• Desarrollar dashboards, KPIs y análisis de tendencias de vulnerabilidad y parcheo.
• Colaborar con equipos de seguridad, arquitectura, producto y operaciones.
• Coordinar despliegues e integraciones entre múltiples flujos de trabajo técnicos.

Conocimientos

Ciberseguridad

Dashboards & KPIs

PowerShell

Python

Herramientas

Qualys

Tenable

Nexpose

Kenna

ServiceNow

Ivanti

Descripción del empleo

Descripción del puesto / Funciones

• Execute Proofs of Concept (PoCs) and technical deployment activities related to Patch Management implementations.
• Configure, manage, and optimize the Qualys platform, including Patch Management, dashboarding, and Cyber Asset Risk (CAR) capabilities.
• Support the evolution from Vulnerability Management to a broader Patch Management and risk-remediation approach.
• Produce technical and functional documentation required for governance and validation processes.
• Document data integration workflows and contribute to architecture review and validation workshops.
• Integrate and manage assets across security and vulnerability management modules.
• Develop dashboards, reports, KPIs, metrics, and trend analysis related to vulnerability and patch management.
• Collaborate with security, architecture, product, and technical teams to ensure successful delivery.
• Coordinate deployment and integration activities across multiple technical workstreams.

Requisitos mínimos

• Strong technical knowledge of cybersecurity tools and enterprise IT environments.
• Proven experience in data security best practices.
• Advanced knowledge of ITSM platforms, particularly ServiceNow.
• Hands-on experience with vulnerability management solutions such as Qualys, Tenable, Nexpose, or Kenna.
• Experience with patch management platforms such as Qualys or Ivanti.
• Practical experience administering and optimizing the Qualys platform.
• Experience creating dashboards, KPIs, metrics, and reporting frameworks.
• Scripting skills in PowerShell and Python.
• Experience supporting technical deployments within security-focused environments.
• Ability to document technical integrations and participate in architecture discussions.

Requisitos valorables

• Experience with product transformation or security program evolution initiatives.
• Knowledge of governance validation processes involving Security, Architecture, and Product teams.
• Experience with TruRisk Eliminate capabilities.
• Strong analytical skills for trend analysis and performance monitoring.
• Experience coordinating multiple technical streams within complex enterprise environments.
• Exposure to large-scale vulnerability remediation and risk reduction programs.

Work Modality

• Collaborative project-based environment.
• Cross-functional interaction with Security, Architecture, Product, and Operations teams.
• Delivery-focused role combining technical implementation, documentation, reporting, and stakeholder engagement.

Idiomas

English and Spanish

Ubicación

Madridd - Hybrid