Detection & Response Management Specialist

Outokumpu; Katowice; Hybrid; PLN 140,000 - 260,000; Full time

Benefits offered by this job

Private life insurance

Comprehensive medical care

Pension scheme

Multisport card

Annual performance bonus (STI)

Accident-free bonus

Hybrid work model

Modern office in Katowice

Job summary

Outokumpu in Katowice is hiring for a security-focused role responsible for defining and executing a comprehensive security posture across IT and OT. You will manage the vulnerability lifecycle, map attack surfaces, and work with threat hunting teams to improve resilience.

The role requires hands-on experience with vulnerability scanners and cloud security tools, plus solid stakeholder engagement. Hybrid work and extensive benefits are provided.

Qualifications

• Degree in Cybersecurity, Computer Science, or related field.
• Several years of hands-on experience in vulnerability, exposure, or attack surface management.

Responsibilities

• Define and execute a comprehensive security posture strategy across IT and OT environments.
• Manage end-to-end vulnerability lifecycle in IT, OT, and web apps.
• Map and monitor attack surface (EASM & IASM) and collaborate with threat hunting teams.
• Govern OT and supplier security postures with hosting security governance meetings.
• Improve CSPM by monitoring and enhancing cloud security posture scores.
• Validate controls and exposures via automated testing and breach simulations.
• Mentor team members and foster a culture of knowledge sharing and growth.

Skills

Vulnerability management

Attack surface management

Stakeholder management

Analytical mindset

Collaborative team player

Education

Degree in Cybersecurity/Computer Science

Tools

Vulnerability scanners

Attack surface mapping tools

Cloud security suites

Job description

O projekcie:

• International, diverse, and highly collaborative working environment
• Hybrid work model (2 times per week on-site)
• Private life insurance (Ergo Hestia)
• Comprehensive medical care (Lux Med)
• Pension scheme (PPK with PZU)
• Multisport card supporting an active lifestyle
• Annual performance bonus (STI) rewarding results and contribution
• Accident-free bonus awarded when defined safety targets are met and no incidents occur on the manufacturing site
• Modern office located at Żelazna 2, Katowice

Wymagania:

• Suitable academic degree in Cybersecurity, Computer Science, or a related field, alongside several years of hands‑on experience in vulnerability, exposure, or attack surface management.
• A highly curious and growth-oriented mindset, with a natural drive to continuously learn, experiment, and stay ahead of the rapidly evolving threat landscape.
• A collaborative team player with a positive, constructive attitude and a genuine desire to help others succeed and grow.
• Strong technical expertise with enterprise security tools, particularly vulnerability scanners, attack surface mapping tools, and cloud security suites.
• Solid understanding of OT security frameworks and experience with specialized industrial control systems (ICS/OT) monitoring tools.
• Experience in web application security testing, including familiarity with web application scanners and crowdsourced security/bug bounty models.
• Proven stakeholder management skills, with the ability to lead governance conversations with external suppliers and vendors.
• Strong analytical mindset with the ability to translate technical exposures into actionable remediation plans for IT and business teams.

Codzienne zadania:

• Defining and executing a comprehensive security posture strategy across both IT and OT environments, shifting the focus from simple vulnerability scanning to holistic exposure management.
• Managing end-to-end vulnerability lifecycle operations across IT infrastructure, OT systems, and web applications utilizing enterprise vulnerability management platforms and application security testing suites.
• Mapping and monitoring the attack surface (EASM & IASM) to identify external and internal blind spots, collaborating closely with threat hunting teams.
• Governing OT and supplier security postures, including hosting security governance meetings with unmonitored vendors and suppliers.
• Optimizing Cloud Security Posture Management (CSPM) by continuously monitoring and improving our security and compliance posture scores in the cloud.
• Validating security controls and exposures through continuous automated testing and breach simulation platforms to prove threat resilience.
• Mentoring and supporting team members, actively fostering a culture of knowledge sharing, continuous growth, and collective skill development across the security team.