Exposure & Posture Management Specialist

Outokumpu; Katowice; Hybrid; PLN 180,000 - 280,000; Full time

Benefits offered by this job

Private life insurance

Medical care (Lux Med)

Pension scheme (PPK)

Multisport card

Annual STI bonus

Accident-free bonus

Hybrid work model

Job summary

Outokumpu in Katowice seeks an experienced cybersecurity professional to lead vulnerability and attack-surface management across IT and OT environments.

You will map external and internal exposure, govern supplier security, and drive improvements in cloud security posture while coordinating with threat-hunting teams. A strong culture of learning and team growth is expected.

Qualifications

• Hands-on experience with vulnerability management and exposure assessment.
• Curious, growth-oriented mindset to stay ahead of threats.
• Collaborative team player with a constructive attitude.

Responsibilities

• Define and drive security posture across IT and OT environments.
• Oversee end-to-end vulnerability lifecycle using enterprise tools.
• Map and monitor attack surface (EASM & IASM) and coordinate with threat-hunting teams.
• Govern OT and supplier security governance with external vendors.
• Improve CSPM and cloud security posture across platforms.
• Validate controls through automated testing and breach simulations.
• Mentor team members and promote knowledge sharing.

Skills

Vulnerability mgmt

Attack surface

Cloud security

ICS/OT monitoring

Web app security

Stakeholder mgmt

Growth mindset

Education

Degree in Cybersecurity

Job description

O projekcie:

• International, diverse, and highly collaborative working environment
• Hybrid work model (2 times per week on-site)
• Private life insurance (Ergo Hestia)
• Comprehensive medical care (Lux Med)
• Pension scheme (PPK with PZU)
• Multisport card supporting an active lifestyle
• Annual performance bonus (STI) rewarding results and contribution
• Accident-free bonus awarded when defined safety targets are met and no incidents occur on the manufacturing site
• Modern office located at Żelazna 2, Katowice

Wymagania:

• Suitable academic degree in Cybersecurity, Computer Science, or a related field, alongside several years of hands‑on experience in vulnerability, exposure, or attack surface management.
• A highly curious and growth-oriented mindset, with a natural drive to continuously learn, experiment, and stay ahead of the rapidly evolving threat landscape.
• A collaborative team player with a positive, constructive attitude and a genuine desire to help others succeed and grow.
• Strong technical expertise with enterprise security tools, particularly vulnerability scanners, attack surface mapping tools, and cloud security suites.
• Solid understanding of OT security frameworks and experience with specialized industrial control systems (ICS/OT) monitoring tools.
• Experience in web application security testing, including familiarity with web application scanners and crowdsourced security/bug bounty models.
• Proven stakeholder management skills, with the ability to lead governance conversations with external suppliers and vendors.
• Strong analytical mindset with the ability to translate technical exposures into actionable remediation plans for IT and business teams.

Codzienne zadania:

• Defining and executing a comprehensive security posture strategy across both IT and OT environments, shifting the focus from simple vulnerability scanning to holistic exposure management.
• Managing end-to-end vulnerability lifecycle operations across IT infrastructure, OT systems, and web applications utilizing enterprise vulnerability management platforms and application security testing suites.
• Mapping and monitoring the attack surface (EASM & IASM) to identify external and internal blind spots, collaborating closely with threat hunting teams.
• Governing OT and supplier security postures, including hosting security governance meetings with unmonitored vendors and suppliers.
• Optimizing Cloud Security Posture Management (CSPM) by continuously monitoring and improving our security and compliance posture scores in the cloud.
• Validating security controls and exposures through continuous automated testing and breach simulation platforms to prove threat resilience.
• Mentoring and supporting team members, actively fostering a culture of knowledge sharing, continuous growth, and collective skill development across the security team.