Vulnerability & Threat Management Engineer - Hybrid

Sysco; Polska; Hybrid; PLN 80,000 - 120,000; Full time

Benefits offered by this job

Hybrid work model

Professional development opportunities

Global cybersecurity team

Job summary

Sysco Kraków is seeking an Engineer - Cybersecurity to lead vulnerability assessment and remediation activities. You will perform scanning, configuration checks, and reporting to strengthen our security posture in a hybrid setup with 2 days in the office and 3 days remote.

The role requires 2+ years in vulnerability testing, experience with Nessus/Nexpose and Metasploit, and collaboration with security and IT teams. Polish office-based work supports professional growth and security excellence.

Qualifications

• At least 2 years of vulnerability assessment and security testing experience.

Responsibilities

• Plan, develop and execute vulnerability scans and ensure compliance with configuration standards.
• Manage enterprise vulnerability assessment and configuration tools.
• Identify and resolve false positives in assessment results.
• Analyze threat and vulnerability feeds for Sysco’s environment.
• Coordinate remediation with technical teams and change control.
• Generate timely vulnerability reports for management and stakeholders.
• Produce metrics on vulnerability coverage and remediation effectiveness.
• Recommend security controls and corrective actions to mitigate risk.
• Assist in security reviews of new and existing applications.

Skills

Vulnerability assessment

Penetration testing

Threat intelligence

Security reporting

Incident response

Security standards

Communication skills

Team collaboration

Problem solving

Learning new technologies

Tools

Nessus

Nexpose

Metasploit

Firewalls

VPN

Proxies

LDAP

DNS

Web servers

Python

Job description

Sysco Kraków is seeking an Engineer - Cybersecurity to lead vulnerability assessment and remediation activities. You will perform scanning, configuration checks, and reporting to strengthen our security posture in a hybrid setup with 2 days in the office and 3 days remote.

The role requires 2+ years in vulnerability testing, experience with Nessus/Nexpose and Metasploit, and collaboration with security and IT teams. Polish office-based work supports professional growth and security excellence.