Devoteam Cyber Trust | Vulnerability Analyst | Telecom Sector

Devoteam; Lisboa; On-site; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Professional development

Employee development

Collaborative culture

Job summary

Devoteam Cyber Trust in Portugal is seeking a hands-on Security Operations / Vulnerability Management Specialist to join our Information Security team. You will manage vulnerability lifecycles, perform security scanning with Qualys, and analyze events to prevent incidents.

You'll collaborate with IT and Infrastructure, drive remediation, support monitoring platforms, and contribute to continuous improvement of vulnerability management and compliance processes.

Qualifications

• Hands-on security professional focused on Vulnerability Management and Security Operations.
• Experience collaborating with IT and Infrastructure teams to drive remediation.
• Strong analytical and proactive mindset with attention to detail.

Responsibilities

• Manage the full vulnerability lifecycle from identification to remediation tracking and validation.
• Use Vulnerability Management and Security Scanning tools, with a strong focus on Qualys.
• Monitor and analyse security events across infrastructure and applications.
• Identify and assess potential security risks and deviations to prevent incidents.
• Perform security compliance assessments and information security audits across the technology environment.
• Coordinate remediation with IT/Infrastruture teams to meet timelines and ensure validation.

Skills

Vulnerability Management

Security Operations

Security Monitoring

Event Analysis

Risk Assessment

Tools

Qualys

Job description

Devoteam Cyber Trust | Vulnerability Analyst | Telecom Sector

• Full-time

Devoteam Cyber Trust is the specialized cybersecurity unit of the Devoteam Group. With over 800 experts across the EMEA region, our mission is to position cybersecurity as a business enabler, not a barrier. We take a comprehensive approach to Cyber Resilience, Applied Security, and Security Service Management to safeguard the digital journey of large and mid-sized enterprises across all sectors and industries.

Since 2009, previously known as INTEGRITY, our Portugal-based team has specialized in delivering cutting-edge Managed Security Services. By combining expertise with proprietary technology, we consistently and effectively reduce our clients' cyber risk. Our wide range of services includes Persistent Penetration Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. Certified in ISO 27001 (Information Security) and ISO 9001 (Quality), PCI-QSA, and members of CREST and CIS (Center for Internet Security), we serve a significant number of clients in over 20 countries.

We are looking for a Security Operations / Vulnerability Management Specialist to join our Information Security team. The role will focus on vulnerability management, security event monitoring, compliance assessments, and supporting the prevention of security incidents.

The successful candidate will have a strong operational mindset and will work closely with IT and Infrastructure teams to ensure vulnerabilities are properly assessed, communicated, remediated, and validated.

Key Responsibilities

Manage the full vulnerability lifecycle, from identification and assessment through communication, remediation tracking, and validation.

Use Vulnerability Management and Security Scanning tools, with a strong focus on Qualys.

Monitor and analyse security events across infrastructure, applications, and communication networks.

Identify and assess potential security risks and deviations, contributing to the prevention of security incidents.

Perform security compliance assessments and Information Security audits across the company's technology environment.

Analyse security data and provide relevant insights to support risk assessment and remediation activities.

Work closely with IT, Infrastructure, and other technical teams to coordinate and follow up on vulnerability remediation.

Track remediation plans, ensuring agreed timelines are met and remediation actions are properly validated.

Support the operation and availability of security monitoring platforms and tools.

Contribute to the continuous improvement of vulnerability management, security monitoring, and incident prevention processes.

Proven hands-on experience with Qualys, particularly Vulnerability Management and Scanning.

Knowledge of security monitoring, event analysis, and technical compliance.

Good understanding of vulnerability management and Information Security concepts and processes.

Strong analytical and critical-thinking skills, with the ability to interpret security data and identify potential risks.

Ability to collaborate effectively with IT and Infrastructure teams to drive vulnerability remediation.

Strong sense of ownership, attention to detail, and technical rigor.

Proactive mindset with a strong focus on security prevention and risk reduction.

Good communication and stakeholder management skills.

What We Are Looking For

A hands-on security professional with a strong focus on Vulnerability Management and Security Operations.

Someone comfortable working across technical teams and following vulnerabilities through to resolution.

A structured, analytical, and proactive professional with a strong sense of responsibility and attention to detail.

What we offer:

• Professional development and monitoring talent;
• Commitment to our employees' development;
• Collaboration in a company that is constantly growing and evolving;
• Strong organizational culture: collaboration, sharing, flexibility, integrity and low ego.

The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.

By clicking the link above or any third-party link within this posting, you are leaving this site and going to a third-party website where the third-party website's terms and privacy policy apply