Cyber Security Consultant

DCG; Gdynia; On-site; PLN 90,000 - 130,000; Full time

Benefits offered by this job

Private medical care

Sports card co-financing

Dedicated consultant support

Job summary

DCG is seeking a Cyber Security Consultant to perform vulnerability assessments and investigate security threats across Windows and Linux environments. You will assess vulnerabilities, analyze logs, and assist with remediation while staying current on AI-related security risks.

The role requires strong English, familiarity with CVSS, and hands-on experience with tools like Qualys, Nessus, Rapid7, or OpenVAS. This is a growth-focused position with ongoing partner projects.

Qualifications

• Understanding of cybersecurity principles and common threat landscape.
• Ability to explain security vulnerabilities and assess their technical and business impact.
• Familiarity with vulnerability severity classification and prioritization methodologies.
• Knowledge of CVSS and its application in vulnerability risk assessment.
• Understanding of vulnerability remediation processes and risk reduction practices.
• Hands-on experience with vulnerability assessment tools.

Responsibilities

• Perform vulnerability assessments using approved security scanning tools
• Analyze and investigate identified security vulnerabilities
• Research vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins
• Support vulnerability prioritization based on severity, exploitability, asset criticality, and business impact
• Contribute to vulnerability remediation and risk reduction activities
• Analyze operating system and security logs for troubleshooting purposes
• Collect and evaluate technical information from Windows and Linux environments
• Support basic security and infrastructure investigations involving network, operating system, and security-related issues
• Identify and assess security risks related to AI-enabled applications, LLMs, and AI agents

Skills

Cybersecurity basics

Threat assessment

Vulnerability analysis

CVSS knowledge

PowerShell basics

Windows administration

Linux administration

Network concepts

English fluency

Tools

Qualys

Nessus

Rapid7

OpenVAS

Job description

As a recruitment company, DCG understands that every business is powered by experienced professionals. Our management style and partnership approach enable us to meet your needs and provide continuous support. Due to our ongoing growth and the large number of recruitment projects we undertake for our partners, we are currently looking for:

Cyber Security Consultant

Responsibilities:

• Perform vulnerability assessments using approved security scanning tools
• Analyze and investigate identified security vulnerabilities
• Research vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins
• Support vulnerability prioritization based on severity, exploitability, asset criticality, and business impact
• Contribute to vulnerability remediation and risk reduction activities
• Analyze operating system and security logs for troubleshooting purposes
• Collect and evaluate technical information from Windows and Linux environments
• Support basic security and infrastructure investigations involving network, operating system, and security-related issues
• Identify and assess security risks related to AI-enabled applications, LLMs, and AI agents

Requirements:

• Understanding of cybersecurity principles and common threat landscape
• Ability to explain security vulnerabilities and assess their technical and business impact
• Familiarity with vulnerability severity classification and prioritization methodologies
• Knowledge of CVSS and its application in vulnerability risk assessment
• Understanding of vulnerability remediation processes and risk reduction practices
• Hands-on experience with vulnerability assessment tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar
• Understanding of vulnerability scanner capabilities, limitations, and common use cases
• Ability to investigate and research vulnerabilities using CVE databases, NVD, vendor advisories, and security bulletins
• Knowledge of vulnerability prioritization based on severity, exploitability, asset criticality, and business impact
• Basic understanding of security risks related to AI systems, AI agents, LLMs, and AI-enabled applications
• Awareness of AI-related vulnerabilities including prompt injection, data leakage, excessive permissions, insecure integrations, and autonomous agent risks
• Understanding of networking concepts including TCP/IP, DNS, DHCP, routing, firewalls, proxies, and network segmentation
• Ability to troubleshoot basic network connectivity and communication issues
• Good understanding of Microsoft Windows and Linux operating systems
• Familiarity with system administration fundamentals and security best practices
• Ability to perform basic administrative tasks in Windows and Linux environments
• Knowledge of common Linux commands including grep, find, ps, netstat/ss, chmod, chown, journalctl, and systemctl
• Basic PowerShell knowledge for administrative and information-gathering activities
• Ability to analyze logs and collect troubleshooting information from operating systems
• Very good command of English, both spoken and written

Nice to have:

• Experience working in security operations, vulnerability management, risk management, or infrastructure support teams
• Familiarity with security frameworks and standards such as NIST, CIS Controls, ISO 27001, or OWASP
• Security certifications such as CompTIA Security+, CompTIA CySA+, SC-900, AZ-500, or similar

Offer:

• Private medical care
• Co-financing for the sports card
• Constant support of dedicated consultant