Specialist, Exposure & Posture Management

Outokumpu; Katowice; Hybrid; PLN 122,000 - 174,000; Full time

Benefits offered by this job

Private life insurance

Comprehensive medical care

Pension scheme (PPK)

Multisport card

Annual STI bonus

Accident-free bonus

Modern office in Katowice

Job summary

Outokumpu in Katowice, Poland is seeking a Cyber Security Specialist to define and execute a comprehensive security posture across IT and OT, managing vulnerability lifecycles and attack surface exposure. The role collaborates with threat hunting teams and governance with external vendors.

A degree in cybersecurity or CS and several years of hands-on experience are required. Hybrid work model with on-site presence in Katowice; salary range is 10,920–15,600 PLN gross per month, with final offer

Qualifications

• Academic degree in Cybersecurity or Computer Science or related field.
• Several years of hands-on vulnerability/exposure/attack surface management experience.
• Strong curiosity and growth mindset.
• Collaborative team player with proactive attitude.
• Strong analytical ability to translate exposures into remediation plans.

Responsibilities

• Defining and executing a comprehensive security posture strategy across IT and OT.
• Managing end-to-end vulnerability lifecycle operations across IT, OT, and web apps.
• Mapping and monitoring the attack surface with threat hunting teams.
• Governing OT and supplier security postures with external vendors.
• Optimizing CSPM by monitoring and improving cloud posture scores.
• Validating security controls via automated testing and breach simulations.
• Mentoring and supporting team members to foster growth.

Skills

Vulnerability management

Attack surface mapping

Cloud security

OT/ICS security

Web app security testing

Stakeholder management

Governance

Education

Cybersecurity or Computer Science degree

Tools

Vulnerability scanners

Attack surface mapping tools

Cloud security suites

Enterprise vulnerability management platforms

Application security testing suites

Web application scanners

Job description

Defend the Future of Sustainable Steel as a Cyber Security Specialist!

About Us

Outokumpu is accelerating the green transition as the global leader in sustainable stainless steel. Our business is rooted in the circular economy: our products are made from 95% recycled materials and are fully recyclable. Our stainless steel is used across society—from infrastructure and mobility to household appliances.

We are committed to the 1.5°C climate target and, with up to 75% lower carbon footprint than the industry average, we help our customers reduce their emissions.

Together, we are working towards a world that lasts forever. Outokumpu employs approximately 8,200 professionals in close to 30 countries, with headquarters in Helsinki, Finland, and shares listed on Nasdaq Helsinki. Learn more at www.outokumpu.com.

Your key responsibilities include:

• Defining and executing a comprehensive security posture strategy across both IT and OT environments, shifting the focus from simple vulnerability scanning to holistic exposure management.
• Managing end-to-end vulnerability lifecycle operations across IT infrastructure, OT systems, and web applications utilizing enterprise vulnerability management platforms and application security testing suites.
• Mapping and monitoring the attack surface (EASM & IASM) to identify external and internal blind spots, collaborating closely with threat hunting teams.
• Governing OT and supplier security postures, including hosting security governance meetings with unmonitored vendors and suppliers.
• Optimizing Cloud Security Posture Management (CSPM) by continuously monitoring and improving our security and compliance posture scores in the cloud.
• Validating security controls and exposures through continuous automated testing and breach simulation platforms to prove threat resilience.
• Mentoring and supporting team members, actively fostering a culture of knowledge sharing, continuous growth, and collective skill development across the security team.

What we expect from you:

• Suitable academic degree in Cybersecurity, Computer Science, or a related field, alongside several years of hands‑on experience in vulnerability, exposure, or attack surface management.
• A highly curious and growth‑oriented mindset, with a natural drive to continuously learn, experiment, and stay ahead of the rapidly evolving threat landscape.
• A collaborative team player with a positive, constructive attitude and a genuine desire to help others succeed and grow.
• Strong technical expertise with enterprise security tools, particularly vulnerability scanners, attack surface mapping tools, and cloud security suites.
• Solid understanding of OT security frameworks and experience with specialized industrial control systems (ICS/OT) monitoring tools.
• Experience in web application security testing, including familiarity with web application scanners and crowdsourced security/bug bounty models.
• Proven stakeholder management skills, with the ability to lead governance conversations with external suppliers and vendors.
• Strong analytical mindset with the ability to translate technical exposures into actionable remediation plans for IT and business teams.

Salary range in Poland: 10,920 - 15,600 zl. gross. Final offer will depend on candidate’s experience and competence.

What We Offer

• International, diverse, and highly collaborative working environment
• Hybrid work model (2 times per week on-site)
• Private life insurance (Ergo Hestia)
• Comprehensive medical care (Lux Med)
• Pension scheme (PPK with PZU)
• Multisport card supporting an active lifestyle
• Annual performance bonus (STI) rewarding results and contribution
• Accident‑free bonus awarded when defined safety targets are met and no incidents occur on the manufacturing site
• Modern office located at Żelazna 2, Katowice

Employment Details

• 3-month probation period
• Permanent employment contract