Senior Vulnerability & Patch Consultant - Remote/Hybrid

Sia; Amsterdam; Hybrid; EUR 70,000 - 120,000; Full time

Benefits offered by this job

Training plan

Office in Amsterdam

Work from home options

Job summary

Sia, a global management consulting group, seeks a Vulnerability & Patch Management (Senior) Consultant to own the end-to-end lifecycle from discovery to remediation in cloud environments (GCP first, then AWS). You will lead risk-based prioritization, design patch processes for high-uptime operations, and collaborate with infrastructure, DevOps and cloud teams to embed security into deployment workflows.

Applicants should have 1–5 years in cybersecurity focusing on vulnerability and patch

Qualifications

• 1-5 years of cybersecurity with focus on vulnerability and patch management.
• Hands-on with Tenable One (or Tenable.io/Nessus) and willingness to transition.
• Understanding of Windows/Linux, networking, and common attack vectors.
• Strong analytical, prioritization, and stakeholder communication skills.
• English and Dutch communication and presentation skills.

Responsibilities

• Operate and optimize the vulnerability and patch platform for scanning, discovery, and exposure management across the enterprise.
• Lead risk-based prioritization of vulnerabilities using Tenable One analytics and exposure scoring.
• Design, coordinate, and oversee patch management processes balancing security with high uptime requirements.
• Track remediation SLAs, report risk exposure, and drive timely closure with owners.
• Collaborate with infrastrucure, DevOps and cloud teams to embed security into deployment workflows.
• Maintain awareness of threats, CVEs and exploit trends and translate them into remediation plans.
• Support audits and contribute to security policy improvements.

Skills

Tenable One

Windows/Linux

Stakeholder comms

English & Dutch

Cybersecurity basics

Tools

Nessus

Job description

Sia, a global management consulting group, seeks a Vulnerability & Patch Management (Senior) Consultant to own the end-to-end lifecycle from discovery to remediation in cloud environments (GCP first, then AWS). You will lead risk-based prioritization, design patch processes for high-uptime operations, and collaborate with infrastructure, DevOps and cloud teams to embed security into deployment workflows.

Applicants should have 1–5 years in cybersecurity focusing on vulnerability and patch