Cybersecurity Lead: Exposure & Posture Management

Outokumpu Chrome Oy; Katowice; On-site; PLN 180,000 - 260,000; Full time

Job summary

Outokumpu Chrome Oy in Katowice, Poland, seeks a Cyber Security Specialist to lead exposure and posture management across IT and OT environments. You will drive end-to-end vulnerability lifecycle operations, map the attack surface, and collaborate with threat hunting teams to strengthen defenses.

The role requires strong technical expertise with vulnerability scanners, EASM/IASM tools, and cloud security suites, plus excellent stakeholder management.

Qualifications

• Requires an academic degree in Cybersecurity, Computer Science, or related field.
• Several years of hands-on experience in vulnerability, exposure, or attack surface management.
• Strong collaboration and stakeholder management skills.

Responsibilities

• Define and execute a comprehensive security posture strategy across IT and OT environments.
• Manage end-to-end vulnerability lifecycle operations for IT, OT, and web apps.
• Map and monitor the attack surface (EASM & IASM) with threat-hunting teams.
• Govern OT and supplier security postures with governance meetings with vendors.
• Improve CSPM by monitoring and improving cloud posture scores.
• Validate controls and exposures with automated testing and breach simulations.
• Mentor and support security team members.

Skills

Exposure management

Vulnerability management

Threat hunting

OT security

Cloud security

Web app security

Stakeholder management

Analytical mindset

Education

Academic degree in Cybersecurity/Computer Science

Tools

Vulnerability scanners

Attack surface mapping tools

ICS/OT monitoring tools

Security testing suites

Job description

Outokumpu Chrome Oy in Katowice, Poland, seeks a Cyber Security Specialist to lead exposure and posture management across IT and OT environments. You will drive end-to-end vulnerability lifecycle operations, map the attack surface, and collaborate with threat hunting teams to strengthen defenses.

The role requires strong technical expertise with vulnerability scanners, EASM/IASM tools, and cloud security suites, plus excellent stakeholder management.