Senior Vulnerability Management Consultant

Andersen Lab; Polska; On-site; PLN 140,000 - 210,000; Full time

Benefits offered by this job

Private health insurance

Sports compensation

Mentoring programs

Job summary

Andersen Lab is seeking a Vulnerability Management Consultant to strengthen cybersecurity in a complex, multi-tenant environment. You will manage end-to-end vulnerability processes, coordinate remediation across multiple client teams, and advise on patching and hardening baselines.

The role requires 5+ years in cybersecurity with 3+ years in vulnerability management, hands-on experience with enterprise scanners, and strong risk-based prioritization skills.

Qualifications

• 5+ years in cybersecurity with a focus on vulnerability management
• Hands-on with enterprise scanning platforms (Nessus, Qualys, Rapid7, MD VM)
• Ability to prioritize vulnerabilities using CVSS/EPSS and asset criticality
• Experience coordinating remediation across multiple teams and SLAs

Responsibilities

• Run and improve end-to-end vulnerability management lifecycle: discovery, scan, prioritize, remediate, verify
• Configure and operate vulnerability scanning tools across infrastructure, cloud, and web apps
• Prioritize based on risk using CVSS/EPSS and asset criticality
• Coordinate remediation with IT, app, and infra owners across client organizations
• Manage exceptions and track SLA compliance
• Produce KPI/KRI reports for technical and management audiences
• Advise on patch management, CIS benchmarks, and attack surface reduction

Skills

Vulnerability management

Threat intelligence

Risk-based prioritization

Patch management

Coordination across teams

English communication

Tools

Nessus/Tenable.io/Tenable.sc

Qualys VMDR

Rapid7 InsightVM

Microsoft Defender Vulnerability Management

Job description

Andersen Lab is seeking a Vulnerability Management Consultant to strengthen cybersecurity in a complex, multi-tenant environment. You will manage end-to-end vulnerability processes, coordinate remediation across multiple client teams, and advise on patching and hardening baselines.

The role requires 5+ years in cybersecurity with 3+ years in vulnerability management, hands-on experience with enterprise scanners, and strong risk-based prioritization skills.