Cybersecurity Specialist

Optiveum; Warszawa; Hybrid; PLN 136,000 - 194,000; Full time

Benefits offered by this job

Hybrid work model

Full-time 40 h/week

Job summary

Optiveum is seeking a Cybersecurity Specialist to join a bank-facing security program. You will own remediation gap governance, analyse vulnerability scans and guide remediation owners to reduce risk. The role emphasizes risk scoring design, cross-functional collaboration and clear communication of security findings.

The ideal candidate has 3+ years hands-on experience, strong knowledge of CVSS, EASM or Threat Modelling, and practical automation with Python or Apache Airflow.

Qualifications

• 3+ years hands-on experience in security findings assessment and remediation.
• Knowledge of vulnerability scoring frameworks (e.g. CVSS) and risk governance.
• Experience with EASM, Threat Modelling or API-related findings.
• Familiarity with Secure DevOps, DORA and OWASP concepts.
• Understanding AI threats and practical governance/automation usage.
• Automation experience, preferably Python or workflow tools.
• Ability to communicate results with data analysis techniques.
• Strong risk-based approach and cross-organisational collaboration.
• Fluent business and technical English.

Responsibilities

• Leading the identification of remediation gaps and driving strategic resolution across the organisation.
• Analysing vulnerability scanning results and turning them into actionable steps to reduce risk.
• Advising stakeholders on remediation strategies in line with best practices and regulations.
• Coordinating with remediation owners to ensure timely execution.
• Ensuring security findings are clearly understood and remediation progresses appropriately.
• Contributing to the design of risk scoring for near real-time prioritisation of critical vulnerabilities.
• Presenting remediation progress, risks and recommendations to stakeholders.
• Mentoring team members and sharing knowledge across the security function.

Skills

Vulnerability scoring

Security governance

External Attack Surface Management

Threat Modelling

Secure DevOps

DORA

OWASP

Python

APIs

AI security awareness

Analytical thinking

Tools

Apache Airflow

Power Automate

Job description

Cybersecurity Specialist

About the Offer

We are currently looking for a Cybersecurity Specialist to join the team of our global client from the banking sector. You will own the governance of security findings: analysing scanning results, identifying remediation gaps, guiding remediation owners across the organisation and helping design risk scoring that lets the bank prioritise and fix critical vulnerabilities faster. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.

Key Details:

• Rate: up to 120 PLN/h net (B2B)

• Work Model: hybrid, 3 days a week in the office, full-time (40 h/week)

• Location: Tricity (Gdańsk/Gdynia) or Warsaw

Responsibilities:

• Leading the identification of remediation gaps and driving strategic resolution initiatives across the organisation

• Analysing complex vulnerability scanning results and turning them into actionable steps that reduce the bank's risk exposure

• Advising stakeholders on remediation strategies in line with security best practices and regulatory expectations

• Working with accountable and responsible remediation owners to ensure timely and effective execution

• Making sure security findings are clearly understood and that remediation progresses at the right pace

• Contributing to the design of risk scoring for near real-time, risk-based prioritisation of critical vulnerabilities

• Presenting remediation progress, risks and strategic recommendations to stakeholders

• Mentoring team members and sharing knowledge across the security function

Requirements:

• 3+ years of hands-on experience in security findings assessment and remediation

• Expert knowledge of vulnerability scoring frameworks (e.g. CVSS), security risk assessment methodologies and governance processes for severity, prioritisation and remediation timelines

• Governance experience in at least one of: External Attack Surface Management (EASM), Threat Modelling or API-related findings

• Knowledge of problem management, Secure DevOps, DORA and OWASP

• Deep understanding of modern AI threats and their impact on security posture, plus practical use of AI in governance and automation workflows

• Experience in automation, preferably with Python, Apache Airflow and/or Power Automate

• Ability to interpret and communicate results using exploratory data analysis and statistical techniques

• Solid understanding of the risk-based approach and risk management

• Strong troubleshooting and conceptual skills, autonomy and ownership

• Experience in cross-organisational collaboration and negotiation

• Fluent business and technical English (written and spoken)