Attack Surface Lead: Vulnerability & Cloud Security

Jobtailor; Kraków; On-site; PLN 180,000 - 250,000; Full time

Job summary

Jobtailor in Kraków, Poland seeks a seasoned cybersecurity professional to lead attack surface reconnaissance and vulnerability management across assets. The role emphasizes risk assessments, pen-testing validation, and mentoring junior analysts while driving automation with scripting and cloud platforms.

The ideal candidate has 4+ years in security operations or offensive security, strong cloud security expertise (Azure/GCP), and familiarity with ISO27001.

Qualifications

• Advanced knowledge of vulnerability management, OSINT, and adversary simulation.
• Strong expertise with tools like Kali Linux, Burp Suite, Tenable, and Splunk.
• Experience in cloud security assessment, particularly with Azure and GCP.
• Experienced with existing and new AI Models
• Understanding of regulatory frameworks such as ISO27001.
• More than 4 demonstrated experience in cybersecurity concentrating on security operations or offensive security.

Responsibilities

• Lead efforts in attack surface reconnaissance and asset identification.
• Manage a portion of the vulnerability management program, including onboarding new assets.
• Conduct in-depth analysis of security vulnerabilities and provide sophisticated risk assessments.
• Apply penetration testing techniques to validate and exploit security gaps.
• Mentor junior analysts and contribute to process improvements.
• Implement automation for attack surface monitoring using scripting and cloud-based solutions.
• Research emerging threats and implement countermeasures accordingly.
• Communicate risks and mitigation strategies to executive leadership.

Skills

Vulnerability Management

OSINT

Adversary Simulation

Penetration Testing

Risk Assessment

Automation Scripting

Cloud Security

AI Models

Regulatory Frameworks

Education

ISO27001

Tools

Kali Linux

Burp Suite

Tenable

Splunk

Azure

GCP

Job description

Jobtailor in Kraków, Poland seeks a seasoned cybersecurity professional to lead attack surface reconnaissance and vulnerability management across assets. The role emphasizes risk assessments, pen-testing validation, and mentoring junior analysts while driving automation with scripting and cloud platforms.

The ideal candidate has 4+ years in security operations or offensive security, strong cloud security expertise (Azure/GCP), and familiarity with ISO27001.