Vulnerability Management Consultant

Andersen Lab; Osterreich; On-site; PEN 155,000 - 251,000; Full time

Benefits offered by this job

Private health insurance

Sports compensation

Annual bonus up to 1,000 EUR

Job summary

Andersen Lab is seeking a Vulnerability Management Consultant to lead end-to-end vulnerability management for a multi-tenant, international environment. You will configure scanning tools, prioritize risks using CVSS/EPSS, coordinate remediation with cross-functional teams, and drive KPI reporting for security leadership.

The role requires 5+ years in cybersecurity, with 3+ years in vulnerability management, and hands-on experience with Nessus/Qualys/InsightVM or Defender VM.

Qualifications

• 5+ years in cybersecurity, with 3+ years in vulnerability management.
• Experience with enterprise scanning platforms.
• Ability to prioritize risks using CVSS, EPSS, and asset criticality.
• Experience coordinating remediation and tracking SLAs.

Responsibilities

• Run and improve end-to-end vulnerability management process (discovery, scanning, prioritization, remediation tracking, verification).
• Configure and operate vulnerability scanning tools for infrastructure, cloud and web apps.
• Prioritize vulnerabilities by risk using CVSS, EPSS, KEV, and asset criticality.
• Coordinate remediation with IT, application and infrastructure teams across multiple client organizations.
• Manage exceptions and track SLA compliance.
• Produce KPI/KRI reports and dashboards for technical and management audiences.
• Advise on patch management, CIS benchmarks, and attack surface reduction.

Skills

Vulnerability management

Cybersecurity

Risk-based prioritization

Remediation coordination

Patching (Windows/Linux/Network)

CVSS/EPSS knowledge

English proficiency

Tools

Tenable Nessus/Tenable.io/Tenable.sc

Qualys VMDR

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

Job description

Andersen is hiring a Vulnerability Management Consultant for a project strengthening cybersecurity, managing vulnerabilities, and protecting critical systems in an international environment.

The customer is a large international organization that relies on modern technology and digital solutions to support its operations. Its activities involve secure IT infrastructure, data management, digital services, and the adoption of emerging technologies to improve operational efficiency and reliability.

The project is focused on providing cybersecurity and digital services for international organizations within a complex multi-tenant environment. It includes cyber defense operations, security incident management, and continuous protection of critical systems and services to ensure secure and reliable operations worldwide.

Responsibilities

• Running and improving the end-to-end vulnerability management process: discovery, scanning, prioritization, remediation tracking and verification.
• Configuring and operating vulnerability scanning tools for infrastructure, cloud and web applications.
• Prioritizing vulnerabilities by risk, using CVSS, EPSS, exploitability, threat intelligence and asset criticality.
• Coordinating remediation with IT, application and infrastructure owners across multiple client organizations.
• Managing exceptions and risk acceptance, and track SLA compliance.
• Producing KPI/KRI reports and dashboards for technical and management audiences.
• Advising on patch management, hardening baselines (e.g. CIS Benchmarks) and attack surface reduction.

Requirements

• Experience in cybersecurity for 5+ years, including 3+ years in vulnerability management.
• Hands-on experience with at least one enterprise scanning platform (Tenable Nessus/Tenable.io/Tenable.sc, Qualys VMDR, Rapid7 InsightVM or Microsoft Defender Vulnerability Management).
• Risk-based prioritization (CVSS, EPSS, CISA KEV, asset criticality).
• Experience coordinating remediation across multiple teams and tracking SLAs.
• Knowledge of patch management for Windows, Linux and network devices, and of hardening standards (CIS).
• Clean record, ready for background verification.
• Level of English – from Upper-Intermediate and above.

Desired skills

• Cloud security posture management (e.g. Defender for Cloud, Wiz, Prisma Cloud).
• Web application and container scanning.
• Attack surface management tools.
• Knowledge of ISO 27001 or NIST CSF.
• Scripting (Python, PowerShell) for reporting automation and API integrations.
• Certifications: CISSP, CompTIA Security+ or CySA+, vendor certifications (Tenable, Qualys).

Reasons to join us

• Experience in teamwork with leaders in FinTech, Healthcare, Retail, Telecom, and others. Andersen cooperates with such businesses as Samsung, Siemens, Johnson & Johnson, BNP Paribas, Ryanair, Mercedes, TUI, Verivox, Allianz, T-Systems, etc..
• The opportunity to change the project and/or develop expertise in an interesting business domain.
• Guarantee of professional, financial, and career growth! The company has introduced systems of mentoring and adaptation for each new employee.
• The opportunity to earn up to an additional 1,000 EUR per month, depending on the level of expertise, which will be included in the annual bonus, by participating in the company's activities.
• Access to the corporate training portal, where the entire knowledge base of the company is collected and which is constantly updated.
• Referral program.
• Private health insurance and sports compensation, depending on the type of employment.
• Salary rate: EUR 3600 - 5850 per month (gross). Final compensation depends on experience and location and professional growth.

Locations

Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Hungary, Italy, Latvia, Lithuania, Luxembourg, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, The Netherlands