Vulnerability Management Analyst

GMV Spain; Tres Cantos; Híbrido; EUR 42.000 - 56.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Relocation package

Flexible compensation

Health insurance

Dental insurance

Free fruit and coffee

Descripción de la vacante

GMV Spain is seeking a Vulnerability Management professional to join a specialized team responsible for the vulnerability lifecycle across infrastructure, applications, cloud, and containers. You will analyze and track vulnerabilities from multiple sources, prioritize by risk, and coordinate remediation while maintaining evidence and SLA compliance.

The role requires at least 2 years in cybersecurity, knowledge of CVSS, and experience with vulnerability scanning tools and reporting.

Formación

• 2+ years of cybersecurity experience, preferably in Vulnerability Management.
• Experience with vulnerability scanners and prioritization.
• Knowledge of CVSS and risk-based prioritization criteria.
• Familiarity with Windows, Linux, networking, web apps and IT infra.
• Able to interpret vulnerabilities, mitigations and vendor recommendations.
• Experience with ticketing/tracking tools and tech reporting.

Responsabilidades

• Join a specialized Vulnerability Management team, contributing to lifecycle management across infrastructure, apps, cloud and containers.
• Analyze, manage and track vulnerabilities from multiple sources including scanner results.
• Correlate and enrich vulnerability information, prioritize by risk, monitor remediation.
• Ensure SLA compliance, coordinate remediation, escalate critical issues.
• Verify remediation, collect evidence, maintain up-to-date operational information.
• Prepare technical reports and service indicators.
• Use and monitor service automation, contribute to continuous improvement.

Conocimientos

Vulnerability Management

CVSS

Windows

Linux

Networking

Web applications

IT infrastructure

Ticketing tools

Technical English

Cloud security

Container security

Educación

Higher Vocational Training

CS/Cybersecurity degree

Herramientas

Qualys

Qualys WAAS

Burp Suite

Prisma Cloud

EPSS

CVSS v4.0

CISA KEV

Kubernetes

Descripción del empleo

If you want todevelop your career in cybersecurity, contributing to a large-scaleVulnerability Management service for a financial sector organization andworking alongside specialized technical teams to reduce risk exposure, yourplace is with us.

We´ll get to the point; we'll tell you what's not on the web.If you want to know more about:GMV

WHAT CHALLENGE WILL YOU BE TAKING ON?

• You will join aspecialized Vulnerability Management team, contributing to the continuousmanagement of the vulnerability lifecycle across infrastructure, applications,Cloud and container environments.
  Your mainresponsibilities will include:
• Analyzing, managing andtracking vulnerabilities from multiple sources, including the review ofscanner results, false positives and duplicates.
• Correlating and enrichingvulnerability information, prioritizing vulnerabilities based on risk andmonitoring remediation activities.
• Monitoring SLA compliance, coordinating with the teams responsible for remediation and escalatingcritical or complex vulnerabilities.
• Verifying remediation, managing evidence and keeping operational information up to date.
• Preparing technical reportingand service indicators.
• Using and monitoring serviceautomation, contributing to continuous improvement.

WHAT DO WE NEED IN OUR TEAM?

For this position,we are looking for a professional with at least 2 years of experience incybersecurity, preferably in Vulnerability Management, and a Higher VocationalTraining qualification or equivalent degree related to Computer Science orCybersecurity.
You should haveexperience and knowledge of:

• Vulnerability Management,scanners and platforms such as Qualys or equivalent tools.
• CVSS and risk-basedprioritization criteria.
• Windows, Linux, networking,web applications and IT infrastructure.
• Vulnerability interpretation,mitigations and vendor recommendations.
• Ticketing and tracking tools,as well as technical reporting and documentation.
• Technical English isrequired, with a B2 level being recommended.
  
• We will valueknowledge of CVSS v4.0, EPSS, CISA KEV, Prisma Cloud, Qualys WAAS, Burp Suiteor equivalent tools, as well as experience in Cloud and container security,Hardening/Compliance, Threat Intelligence, Pentesting and technicalvulnerability validation.

WHAT DO WE OFFER?

Hybridworking model and 8 weeks per year of teleworking outside your usual geographical area.

Flexible start and finish times, and intensive working hours Fridays and insummer.

Personalizedcareer plan development, training and language learning support.

National and international mobility. Do you come from another country?We can offer you a relocation package.

Competitivecompensation with ongoing reviews, flexible compensation anddiscount on brands.

Wellbeingprogram: Health, dental and accident insurance; free fruit and coffee, physical,mental and financial health training, and much more!

In our recruitment processes youwill always have telephone and personal contact, face-to-face or online, withour talent acquisition team. In addition, bank transfers and bank cards will neverbe requested. If you are contacted through another process, please get in touch with the person responsible for the selection process.

We promote equal opportunities inrecruitment, and we are committed to inclusion and diversity.