MSSP Vulnerability Analyst — SOC Risk & Remediation

Stefanini EMEA; Kraków; On-site; PLN 180,000 - 240,000; Full time

Job summary

Stefanini Group seeks a skilled CSS Vulnerability Analyst to join our SOC within an MSSP framework in Kraków, Poland. You will independently deliver vulnerability assessments, support client interactions, and provide actionable risk insights while ensuring high-quality service delivery.

Requirements include 3–5 years in cybersecurity operations with hands-on vulnerability/patch management and expertise in Defender, Nessus, Qualys, or Rapid7. English fluency is essential.

Qualifications

• Bachelor's degree in computer science, IT, engineering, or related field.
• Minimum: high school with Baccalaureate diploma.
• Excellent English communication skills (verbal and written).

Responsibilities

• Serve as a technical escalation point for vulnerability management-related issues.
• Perform vulnerability assessment scanning, false positive validation, and policy configuration.
• Review vulnerabilities across technologies to identify high-risk issues.
• Conduct risk, threat, and vulnerability analyses and remediation guidance.
• Support patch management and remediation tracking activities.
• Communicate vulnerability metrics and risk posture to clients and management.
• Ensure activities comply with SLAs and client requirements.
• Contribute to continuous improvement of processes and reporting.
• Mentor junior analysts and share knowledge.

Skills

Cybersecurity operations

Vulnerability management

English communication

Analytical thinking

Team collaboration

Education

Bachelor's degree in CS/IT/Engineering

High school diploma with Baccalaureate

Tools

Microsoft Defender Vulnerability Management

Nessus

Qualys

Rapid7

Job description

Stefanini Group seeks a skilled CSS Vulnerability Analyst to join our SOC within an MSSP framework in Kraków, Poland. You will independently deliver vulnerability assessments, support client interactions, and provide actionable risk insights while ensuring high-quality service delivery.

Requirements include 3–5 years in cybersecurity operations with hands-on vulnerability/patch management and expertise in Defender, Nessus, Qualys, or Rapid7. English fluency is essential.