Vulnerability Management Team Lead

GMV Spain; Tres Cantos; Híbrido; EUR 70.000 - 95.000; Jornada completa

Descripción de la vacante

GMV Spain is seeking a Technical Reference for Vulnerability Management within a large-scale financial sector service. You will lead advanced analysis, risk-based prioritization and remediation across infrastructure, applications, Cloud and container environments.

The ideal candidate has at least 5 years in cybersecurity with strong Vulnerability Management experience and a technical university degree or equivalent.

Formación

• At least 5 years in cybersecurity with strong Vulnerability Management experience.
• Technical university degree or equivalent qualification.
• Knowledge of vulnerability lifecycle and risk-based prioritization (CVSS, EPSS, CISA KEV, Threat Intelligence).
• Experience with vulnerability scanning/management tools (Qualys).
• Solid knowledge of Windows, Linux, networking, cloud and container environments.
• Experience in exploitation analysis, mitigations and compensating controls, plus SLA/KPI reporting.
• Scripting, REST APIs, JSON and automation knowledge.
• Strong technical leadership, autonomy and multidisciplinary coordination.
• Experience in financial sector, critical infrastructure or managed services; Fortify/Checkmarx knowledge is a plus.

Responsabilidades

• Acting as the technical reference for Vulnerability Management operations and resolving escalations.
• Performing advanced analysis and risk-based prioritization considering CVSS, EPSS, CISA KEV and Threat Intelligence.
• Defining and monitoring remediation activities, mitigations and compensating controls.
• Coordinating with Hacking, Cloud, Hardening/Compliance, Threat Intelligence and Automation teams.
• Supervising critical or actively exploited vulnerabilities, including verification and closure.
• Monitoring SLAs, KPIs and reporting, identifying automation and service improvements.
• Contributing to the evolution of the service and safe use of AI in Vulnerability Management.

Conocimientos

Vulnerability Management

Automation

Scripting

REST APIs

JSON

Leadership

Cloud

Containers

Windows

Linux

Educación

Technical university degree

Herramientas

Qualys

Fortify

Checkmarx

SCA

Descripción del empleo

If you want to takethe next step in your cybersecurity career,becoming a technical reference in VulnerabilityManagement within a large-scale service for a financial sectororganization, your place is with us.

We´ll get to the point; we'll tell you what's not on the web.If you want to know more about deGMV

WHAT CHALLENGE WILL YOU BE TAKING ON?

You will act as the technical reference for a Vulnerability Managementservice, leading advanced analysis, risk-based prioritization andvulnerability treatment across infrastructure,applications, Cloud and container environments.
Your mainresponsibilities will include:

• Acting as the technicalreference for Vulnerability Management operations and resolving technical escalations.
• Performing advanced analysisand risk-based prioritization, considering factors such as CVSS, EPSS,CISA KEV, exposure, criticality and Threat Intelligence.
• Defining and monitoring remediationactivities, mitigations and compensating controls.
• Coordinating with specialized Hacking,Cloud, Hardening/Compliance, Threat Intelligence and Automation teams.
• Supervising critical oractively exploited vulnerabilities, including technicalverification and closure.
• Monitoring SLAs, KPIsand reporting,identifying opportunities for automation and service improvement.
• Contributing to the evolutionof the service and the safe and supervised use of AI in Vulnerability Management.

WHAT DO WE NEED IN OUR TEAM?

Weare looking for a professional with at least 5years of experience in cybersecurity, with significant experience in Vulnerability Management, and a technical university degree or equivalentqualification.

You should have:

• Strong knowledge of the vulnerabilitylifecycle and risk-based prioritization, including CVSS, EPSS, CISA KEV and ThreatIntelligence.
• Experience with vulnerabilityscanning and management tools, preferably Qualys.
• Solid knowledge of Windows,Linux, networking, applications, Cloud and container environments.
• Experience in exploitationanalysis, defining mitigations and compensating controls, as well as SLA, KPI andreporting management.
• Knowledge of scripting,REST APIs, JSON and automation.
• Strong technicalleadership, autonomy and multidisciplinary coordination skills.
• Experience in the financial sector, critical infrastructure or managedservices, as well as knowledg

We will also value previous experience, and knowledge in Fortify,Checkmarx or equivalent platforms, as well as knowledge of SCA, dependency analysis and knowledge of manual code review.

WHAT DO WE OFFER?

Hybridworking model and 8 weeks per year of teleworking outside your usual geographical area.

Flexible start and finish times, and intensive working hours Fridays and insummer.

Personalizedcareer plan development, training and language learning support.

National and international mobility. Do you come from another country?We can offer you a relocation package.

Competitivecompensation with ongoing reviews, flexible compensation anddiscount on brands.

Wellbeingprogram: Health, dental and accident insurance; free fruit and coffee, physical,mental and financial health training, and much more!

We promote equal opportunities inrecruitment, and we are committed to inclusion and diversity.