Strategic Exposure & Posture Security Lead

Outokumpu Oyj; Katowice; On-site; PLN 180,000 - 280,000; Full time

Job summary

Outokumpu Oyj is seeking a senior security professional to define and execute a comprehensive security posture strategy across IT and OT. You will manage end-to-end vulnerability lifecycles for IT, OT, and web apps, while mapping the attack surface with EASM & IASM and collaborating with threat hunting teams.

The role also involves governing OT and supplier security postures, hosting governance meetings with external vendors, and driving CSPM improvements in cloud environments.

Qualifications

• Several years of hands-on experience in vulnerability, exposure, or attack surface management.
• Experience with enterprise vulnerability management platforms and app sec testing suites.
• Experience in governance with external suppliers and vendors.

Responsibilities

• Define and execute a comprehensive security posture strategy across IT and OT.
• Manage end-to-end vulnerability lifecycle for IT, OT, and web apps.
• Map and monitor attack surface using EASM & IASM; collaborate with threat hunting.
• Govern OT and supplier security postures; host governance meetings with unmonitored vendors.
• Optimize CSPM and continuously improve cloud security posture scores.
• Validate controls via automated testing and breach simulations.
• Mentor and grow security team.

Skills

Vulnerability scanners

Attack surface mapping

Cloud security

ICS/OT monitoring

Threat hunting

Education

Bachelor's degree in Cybersecurity, Computer Science, or related field

Tools

Enterprise vulnerability management platforms

Application security testing suites

Job description

Outokumpu Oyj is seeking a senior security professional to define and execute a comprehensive security posture strategy across IT and OT. You will manage end-to-end vulnerability lifecycles for IT, OT, and web apps, while mapping the attack surface with EASM & IASM and collaborating with threat hunting teams.

The role also involves governing OT and supplier security postures, hosting governance meetings with external vendors, and driving CSPM improvements in cloud environments.