Vulnerability Management Engineer

ING Hubs B.V. sp. z o.o. Oddział w Polsce; Katowice; On-site; PLN 79,000 - 167,000; Full time

Job summary

ING Hubs Poland is seeking a specialist in vulnerability management to join the Vulnerability Management Response Team in Katowice. You will manage complex follow-up cases from vulnerability scanning, penetration testing, secret scanning, and Red Team findings, and coordinate remediation with multiple stakeholders to drive timely risk reduction.

We expect strong analytical skills, extensive Power BI experience (data modeling, DAX, KPI dashboards), and the ability to align remediation with

Qualifications

• At least 3 years of experience in vulnerability management, security testing, or cybersecurity operations.
• Strong understanding of risk management, vulnerability prioritization, and remediation governance.
• Ability to combine business context, asset criticality, severity, and remediation timelines into risk-based decisions.
• Advanced analytical and data interpretation skills.
• Power BI skills including Power Query, data modeling, DAX, KPI development, and dashboards.
• Excellent stakeholder management, communication, and coordination skills.
• Continuous improvement mindset with ability to identify strategic security opportunities.

Responsibilities

• Manage follow-up cases for vulnerability scanning, pen tests, secret scanning, Red Team findings.
• Coordinate remediation activities across multiple stakeholders.
• Drive overdue findings toward remediation, mitigation, or risk registration.
• Perform root cause analysis to identify systemic issues.
• Design and maintain Power BI dashboards and KPIs.
• Recommend process improvements to reduce vulnerabilities.
• Prepare executive-level risk reports for stakeholders.

Skills

Vulnerability management

Power BI

Data interpretation

Stakeholder management

Risk management

Analytics

Job description

ING Hubs Poland is hiring! The expected salary for this position: 7 100 pln - 15 000 pln The financial ranges specified in the announcement are adjusted and may differ from the range specified in the remuneration regulations.

We are looking for you, if you:

Qualifications:

• have at least 3 years of proven experience in vulnerability management, security testing, or cybersecurity operations
• have strong understanding of risk management principles, vulnerability prioritization, and remediation governance
• present ability to combine business context, asset criticality, severity, and remediation timelines into risk-based decision making
• have advanced analytical and data interpretation skills
• have strong Power BI knowledge, including Power Query, data modeling, DAX, KPI development, and dashboard design
• have excellent stakeholder management, communication, and coordination skills
• you have continuous improvement mindset with the ability to identify strategic opportunities to reduce organizational security risk

You'll get extra points for:

• have knowledge about vulnerabilities (i.e. OWASP top 10)
• ability to solve complex problems and their correlation, draw conclusions and propose corrective actions/improvements
• IT security related certification (like: CompTIA CySA+, CompTia Security+, CEH, CHFI, CISSP)
• IT related certification (like: RHCSA, MCSA, CCNA)

Your responsibilities:

• manage complex follow-up cases related to vulnerability scanning, penetration testing, secret scanning, Red Team exercises, and security baseline validation findings
• identify and challenge ownership of findings and coordinate remediation activities across multiple stakeholders
• drive overdue findings towards remediation, mitigation, or formal risk registration
• perform root cause analysis and identify systemic issues that contribute to recurring findings
• design and maintain management reporting, KPIs, and Power BI dashboards
• recommend and implement process improvements to reduce recurring vulnerabilities and improve remediation outcomes
• prepare executive-level reports and present security risk insights to stakeholders

Information about the squad:

As the Vulnerability Management Response Team, we ensure that identified vulnerabilities are effectively managed and remediated before they can be exploited by malicious actors. Our ambition is to eliminate security weaknesses and reduce the organization's exposure to cyber threats. We support ING from a global perspective, working closely with stakeholders across the organization to drive timely and effective remediation. At ING Hubs Poland, we embrace Agile ways of working and use frameworks such as Scrum and Kanban to deliver value efficiently and continuously improve our processes. We are an innovative team built on trust, collaboration, and empowerment. The high level of autonomy given to our employees fosters motivation, accountability, and creativity, enabling us to adapt quickly to evolving business needs and deliver meaningful impact for our stakeholders.

The role naming convention in the global ING job architecture will be "Engineer II".

We're a global bank with a strong European base, and our more than 60,000 colleagues serve around 38 million customers and corporate clients in over 40 countries. Joining ING means working with friendly and collaborative people towards making a positive impact on people and planet. We believe in empowering the people around us and our customers to stay a step ahead. Working here means having the autonomy to drive progress, helping to create superior customer value and contributing to our ambition of putting sustainability at the heart of everything we do. Here, we're more than just a workplace – we're a community of innovators, problem-solvers, and forward-thinkers, dedicated to making a real impact. Whether you're just starting your career or seeking the next big challenge, we have opportunities that will inspire and push you to grow.

Your future at ING starts with one application.