IT Security Consultant (Threat Identification)

ITConnect; Polska; Híbrido; PLN 165.000 - 193.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

3 dni w biurze tygodniowo

Biura: Gdańsk/Gdynia, Warszawa, Łódź

Descripción de la vacante

ITConnect poszukuje Cyber Security Consultant z mocnym zrozumieniem zarządzania podatnościami i ogólnych koncepcji cyberbezpieczeństwa. Kandydat powinien znać procesy oceny podatności, terminologię bezpieczeństwa oraz podstawowe elementy infrastruktury IT.

Wymagane są umiejętności analizy podatności, znajomość narzędzi skanowania (Qualys, Nessus, Rapid7, OpenVAS) oraz podstaw PowerShella i obsługa systemów Windows/Linux. Pracę w modelu hybrydowym i wsparcie projektowe.

Formación

• Znajomość zarządzania podatnościami i ryzyka
• Umiejętność oceny podatności i prioryzacji
• Znajomość CVSS i standardów bezpieczeństwa

Conocimientos

Vulnerability mgmt

Threat ID

Log analysis

Threat intel

Security frameworks

Windows/Linux

PowerShell basics

Troubleshooting

Herramientas

Qualys

Nessus

Rapid7

OpenVAS

PowerShell

Descripción del empleo

• IT Security Consultant (Threat Identification)

Vulnerability Prioritization & Risk Assessment

Vulnerability Scanning Tools (Qualys

Nessus

Rapid7

OpenVAS)

Powershell

Log Analysis & Troubleshooting

Vuln

ISO 27001

NIST

OWASP

AZ-500

CIS Controls

CompTIA CySA+

SC-900

CompTIA Security+

Stawka:

120 PLN / h

Opis projektu:

Our Client is looking for a Cyber Security Consultant with a solid understanding of vulnerability management and general cybersecurity concepts. The ideal candidate should possess practical knowledge of vulnerability assessment processes, common security terminology, and basic IT infrastructure components.

• Understanding of cybersecurity principles and common threat landscape.
• Ability to explain what a security vulnerability is and understand its business and technical impact.
• Familiarity with vulnerability severity classification and prioritization methodologies.
• Knowledge of CVSS (Common Vulnerability Scoring System) and how vulnerability scores are used for risk assessment.
• Understanding of vulnerability remediation processes and risk reduction practices.
• Experience with vulnerability scanning and assessment tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar solutions.
• Understanding of how vulnerability scanners work, their capabilities, limitations, and typical use cases.
• Ability to identify, investigate, and research vulnerabilities using public sources such as CVE databases, NVD, vendor advisories, and security bulletins.
• Knowledge of vulnerability prioritization based on severity, exploitability, asset criticality, and business impact.
• Good understanding of Microsoft Windows and Linux operating systems.
• Knowledge of common Linux commands (e.g., grep, find, ps, netstat/ss, chmod, chown, journalctl, systemctl).
• Basic PowerShell knowledge, including execution of administrative and information-gathering commands.
• Ability to analyze logs and collect basic troubleshooting information from operating systems.
• Experience working in security operations, vulnerability management, risk management, or infrastructure support teams.
• Familiarity with security frameworks and standards such as NIST, CIS Controls, ISO 27001, or OWASP.
• Security certifications such as CompTIA Security+, CompTIA CySA+, SC-900, AZ-500, or similar.

To oferujemy:

• 3 days per week from one of the offices: Gdańsk/Gdynia, Warsaw, Łódź