Vulnerability Management Analyst

GMV Spain; Tres Cantos; Híbrido; EUR 42.000 - 56.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Relocation package

Flexible compensation

Wellbeing program

8 weeks teleworking

Descripción de la vacante

GMV Spain is seeking a cybersecurity professional to join a Vulnerability Management team. In this role you will manage the vulnerability lifecycle across infrastructure, applications, cloud, and containers, analyzing scanner results, prioritizing risks, and coordinating remediation with technical teams.

You will monitor SLA compliance, verify remediation, and produce technical reports and indicators while using service automation to drive continuous improvements.

Formación

• At least 2 years in cybersecurity, preferably Vulnerability Management.
• Knowledge of CVSS v4.0, EPSS, CISA KEV is valued.
• Experience with Windows, Linux, networking, web apps and IT infra.
• Good technical reporting and documentation skills.
• Technical English proficiency (B2) recommended.

Responsabilidades

• Analyze, manage and track vulnerabilities from multiple sources.
• Correlate and enrich vulnerability information and prioritize risks.
• Monitor SLA compliance and coordinate remediation efforts.
• Verify remediation and maintain evidence and records.
• Prepare technical reports and service indicators.
• Use monitoring automation and contribute to improvements.

Conocimientos

Vulnerability Management

Risk-based prioritization

CVSS concepts

Vulnerability interpretation

Ticketing & reporting

Cloud & container security

Threat Intelligence

Technical English (B2)

Vulnerability validation

Remediation coordination

Educación

Higher Vocational Training in CS/Cybersecurity

Herramientas

Qualys

Burp Suite

Prisma Cloud

Qualys WAAS

Descripción del empleo

If you want todevelop your career in cybersecurity, contributing to a large-scaleVulnerability Management service for a financial sector organization andworking alongside specialized technical teams to reduce risk exposure, yourplace is with us.

We´ll get to the point; we’ll tell you what’s not on the web.If you want to know more about:GMV

WHAT CHALLENGE WILL YOU BE TAKING ON?

• You will join aspecialized Vulnerability Management team, contributing to the continuousmanagement of the vulnerability lifecycle across infrastructure, applications,Cloud and container environments.
  Your mainresponsibilities will include:
• Analyzing, managing andtracking vulnerabilities from multiple sources, including the review ofscanner results, false positives and duplicates.
• Correlating and enrichingvulnerability information, prioritizing vulnerabilities based on risk andmonitoring remediation activities.
• Monitoring SLA compliance,coordinating with the teams responsible for remediation and escalatingcritical or complex vulnerabilities.
• Verifying remediation,managing evidence and keeping operational information up to date.
• Preparing technical reportingand service indicators.
• Using and monitoring serviceautomation, contributing to continuous improvement.

WHAT DO WE NEED IN OUR TEAM?

For this position,we are looking for a professional with at least 2 years of experience incybersecurity, preferably in Vulnerability Management, and a Higher VocationalTraining qualification or equivalent degree related to Computer Science orCybersecurity.
You should haveexperience and knowledge of:

• Vulnerability Management,scanners and platforms such as Qualys or equivalent tools.
• CVSS and risk-basedprioritization criteria.
• Windows, Linux, networking,web applications and IT infrastructure.
• Vulnerability interpretation,mitigations and vendor recommendations.
• Ticketing and tracking tools,as well as technical reporting and documentation.
• Technical English isrequired, with a B2 level being recommended.
  
• We will valueknowledge of CVSS v4.0, EPSS, CISA KEV, Prisma Cloud, Qualys WAAS, Burp Suiteor equivalent tools, as well as experience in Cloud and container security,Hardening/Compliance, Threat Intelligence, Pentesting and technicalvulnerability validation.

WHAT DO WE OFFER?

Hybridworking model and 8 weeks per year of teleworking outside your usual geographical area.

Flexible start and finish times, and intensive working hours Fridays and insummer.

Personalizedcareer plan development, training and language learning support.

National and international mobility. Do you come from another country?We can offer you a relocation package.

Competitivecompensation with ongoing reviews, flexible compensation anddiscount on brands.

Wellbeingprogram: Health, dental and accident insurance; free fruit and coffee, physical,mental and financial health training, and much more!

In our recruitment processes youwill always have telephone and personal contact, face-to-face or online, withour talent acquisition team. In addition, bank transfers and bank cards will neverbe requested. If you are contacted through another process, please get in touch with the person responsible for the selection process.

We promote equal opportunities inrecruitment, and we are committed to inclusion and diversity.