Cyber Security Specialist – Vulnerability Management (f/m/div)

Infineon Technologies AG; Porto; On-site; EUR 45,000 - 75,000; Full time

Job summary

Infineon Technologies AG in Porto seeks a Cyber Security Specialist – Vulnerability Management to support enterprise and OT vulnerability programs. You will collaborate with infrastructure, applications, network, and third parties to assess risk, prioritize actions, and drive remediation across cloud, IT, and OT environments.

The role requires strong communication, structured work style, and practical security experience after 3+ years in the field.

Qualifications

• Bachelor's degree or higher in IT, cybersecurity, or related field.
• 3+ years in vulnerability management or security assessments.
• Ability to translate findings into actionable remediation guidance.

Responsibilities

• Support vulnerability management across enterprise and OT environments from risk assessment to remediation.
• Manage findings from assessment to closure across cloud, IT, applications, network, DMZ and OT.
• Write and maintain advisories with impact, scope, and remediation guidance.

Skills

Vulnerability management

Risk assessment

Remediation tracking

Communications

Education

Degree in IT/Cybersecurity

Tools

OSCP

CISSP

CompTIA Security+

Job description

#WeAreIn for jobs that impact everyone's life. Behind every breakthrough is a blueprint: ready to shape the strategy that propels innovation? As Cyber Security Specialist – Vulnerability Management in our Corporate Functions team become the heart of our organization by developing strategies, refining processes, and implementing initiatives that empower our business to thrive . Are you in?

Key responsibilities in your new role

• You will support vulnerability management activities across enterprise and OT environments, from risk assessment and remediation to reporting and continuous security improvement.
• Manage vulnerability findings from assessment to closure across cloud, manage IT, applications, network, DMZ, and OT Validate results, prioritize risk, and maintain an accurate vulnerability backlog.
• Write and maintain vulnerability advisories with impact, affected scope, and clear remediation or mitigation guidance.
• Support technical teams with environment-specific fix and mitigation options, including compensating controls where patching is not immediately possible.
• Track remediation, exceptions, and retesting, and report status and trends to stakeholders.
• Turn recurring findings into concrete improvements in hardening, exposure reduction, and vulnerability-handling processes.

Qualifications and skills to help you succeed

• You are a strong communicator and collaborative professional, able to effectively coordinate with infrastructure, application, network, third-party, and other cross-functional teams and stakeholders, while providing clear updates, advisories, and management reporting.
• You are structured and detail-oriented, with strong organizational and prioritization skills, balancing technical accuracy with realistic timelines to drive issues through to resolution or formal risk acceptance.
• Degree in IT, Cybersecurity, or a related field, or equivalent practical experience - relevant certifications, such as OSCP, CISSP, CompTIA Security+, or vendor cloud/security are a plus.
• At least 3 years experience in vulnerability management, security assessments, or a closely related security role, with hands-on work on findings, advisories, and remediation tracking.
• Experience across more than one environment, such as cloud, managed IT, applications, network, DMZ and OT.
• Solid understanding of common vulnerabilities, risk rating, exposure, and practical remediation or mitigation options, including compensating controls.
• Ability to read assessment reports, validate findings, and turn them into clear advisories and prioritized actions for technical teams.
• Working knowledge of network concepts and of how risk differs between cloud, application, perimeter, and possibly OT environments.
• Fluency in English.

#WeAreIn for driving decarbonization and digitalization. As a global leader in semiconductor solutions in power systems and IoT, Infineon enables game-changing solutions for green and efficient energy, clean and safe mobility, as well as smart and secure IoT.

Together, we drive innovation and customer success, while caring for our people and empowering them to reach ambitious goals. Be a part of making life easier, safer and greener.

Are you in? We are on a journey to create the best Infineon for everyone. We strive to create the best Infineon for everyone by embracing diversity and inclusion.

We welcome applicants for who they are and offer a workplace built on trust, openness, respect and equal opportunity.

Our hiring decisions are based on skills and experience. Even if you don’t meet every requirement, we encourage you to apply.

Please let your recruiter know if you need any accommodations during the interview process.

Learn more about our various contact channels and about Diversity & Inclusion at Infineon.

Regan Lottering, LinkedIn