Vulnerability Management Lead - Secure Dev & Cloud (Hybrid)

GMV Spain; Tres Cantos; Híbrido; EUR 55.000 - 75.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid working model

Teleworking opportunities

Relocation package

Wellbeing program

Descripción de la vacante

GMV Spain seeks an experienced professional to lead Vulnerability Management for large-scale services in the financial sector. You will act as the technical reference, perform advanced risk-based prioritization, and guide remediation across infrastructure, apps, Cloud and container environments.

Responsibilities include coordinating with Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams, monitoring SLAs, and driving automation to improve services.

Formación

• 5+ years of experience in cybersecurity.
• Significant experience in Vulnerability Management and risk-based prioritization.
• Technical university degree or equivalent qualification.

Responsabilidades

• Act as the technical reference for Vulnerability Management operations and resolving escalations.
• Perform advanced analysis and risk-based prioritization using CVSS, EPSS, CISA KEV, and Threat Intelligence.
• Define and monitor remediation activities, mitigations and compensating controls.
• Coordinate with Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams.
• Supervise critical or actively exploited vulnerabilities and ensure closure.

Conocimientos

Vulnerability Management

Technical leadership

Scripting

REST APIs

JSON

Educación

Technical university degree

Herramientas

Qualys

Prisma Cloud

Burp Suite

Descripción del empleo

GMV Spain seeks an experienced professional to lead Vulnerability Management for large-scale services in the financial sector. You will act as the technical reference, perform advanced risk-based prioritization, and guide remediation across infrastructure, apps, Cloud and container environments.

Responsibilities include coordinating with Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams, monitoring SLAs, and driving automation to improve services.