Digital Risk & Vulnerability Management Specialist (m/f/d)

Allianz Services; Lisboa; Híbrido; EUR 70 000 - 110 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work model

Bonus scheme

Pension

Employee stock plan

Employee discounts

Healthcare

Resumo da oferta

Allianz is seeking a hands-on Attack Surface Management (ASM) Expert to support discovery, monitoring and reduction of Allianz’s risk exposure across Allianz’s global environment. You will identify assets, detect vulnerabilities and misconfigurations, and drive timely remediation in collaboration with IT, security operations, and architecture teams.

The role blends hands-on technical work with reporting and stakeholder engagement, and offers a hybrid work model with international mobility

Qualificações

• Degree or higher in information security, computer science, or related field.
• Hands-on ASM experience prioritizing exposures by exploitability and impact.
• Experience with ASM platforms to detect unknown assets and misconfigurations.
• Ability to document findings and communicate risk clearly to IT, DevOps and SOC teams.

Responsabilidades

• Identify assets and map external-facing digital assets to maintain visibility.
• Analyze ASM findings and prioritize exposures based on risk.
• Validate risks and support remediation with IT, DevOps and owners.
• Detect misconfigurations and shadow IT, initiating follow-up actions.
• Maintain documentation and support dashboards and KPIs.

Conhecimentos

Attack Surface Management

Threat intelligence correlation

Formação académica

Bachelor's degree in Information Security or related field

Ferramentas

CyCognito

Palo Alto Cortex Xpanse

Rapid7

Descrição da oferta de emprego

Role Overview

Allianz is seeking a hands-on and detail-oriented Attack Surface Management (ASM) Expert to support the continuous discovery, monitoring, and reduction of Allianz’s risk exposure. In this role, you will be responsible for identifying assets, detecting vulnerabilities and misconfigurations, and ensuring risks are addressed before they can be exploited. You will work closely with IT, security operations, and architecture teams to maintain visibility across the global environment and proactively reduce Allianz’s attack surface. This role is essential in strengthening our preventive cyber defense and enabling secure business innovation.

What You Do

• You support and follow on the following prioritization, reporting, risk registration and consequence management on managing attack surface. This includes engaging the following activities:
• Asset Discovery & Exposure Mapping: Continuously identify and map Allianz’s external-facing digital assets (domains, IPs, cloud services, applications), ensuring complete visibility into the attack surface.
• Analyse findings from ASM tools, correlate with threat intelligence and business context, and prioritize exposures based on exploitability and potential impact.
• Issue Validation & Remediation Support: Validate identified risks and exposures, work with IT, DevOps, and application owners to ensure timely mitigation and track remediation progress.
• Misconfiguration & Shadow IT Detection: Detect unapproved or misconfigured systems and services (e.g., open ports, weak encryption, unmanaged cloud services), and initiate appropriate follow-up actions.
• Documentation & Reporting: Maintain detailed documentation of findings, support reporting to management, and contribute to dashboards and KPIs that reflect ASM maturity and progress.
• Security Best Practices Advocacy: Promote awareness of ASM risks and secure deployment practices across IT and development teams, helping reduce exposure from the ground up.

What You Bring

• Higher education degree in Information Security, Computer Science, or a related technical field.
• Attack Surface Management Expertise: Proven hands-on experience in identifying, classifying, and managing external digital assets. Skilled in using ASM platforms (e.g., CyCognito, Palo Alto Cortex Xpanse, Rapid7, or similar) to detect unknown assets, misconfigurations, and exposure risks.
• Technical and Analytical Skills: Solid understanding of internet protocols, DNS, SSL/TLS, cloud infrastructure (AWS, Azure, GCP) and web application technologies. Strong ability to analyse external exposure data, correlate with threat intelligence, and recommend practical remediation actions.
• Collaboration and Communication: Ability to collaborate with IT operations, DevOps, vulnerability management, and SOC teams to support risk reduction. Effective communicator with the ability to document findings, articulate risk impact, and support mitigation efforts in a clear, actionable manner.
• We highly welcome candidates with a genuine interest and affinity for Information Technology (IT) and Generative Artificial Intelligence (GenAI), as these attributes are considered valuable assets to our team.

What We Offer

• We offer a hybrid work model which recognizes the value of striking a balance between in-person collaboration and remote working incl. up to 25 days per year working from abroad.
• We believe in rewarding performance and our compensation and benefits package includes a company bonus scheme, pension, employee shares program and multiple employee discounts (details vary by location).
• From career development and digital learning programs to international career mobility, we offer lifelong learning for our employees worldwide and an environment where innovation, delivery and empowerment are fostered.
• Flexible working, health and wellbeing offers (including healthcare and parental leave benefits) support to balance family and career and help our people return from career breaks with experience that nothing else can teach.

Allianz Group is one of the most trusted insurance and asset management companies in the world. Caring for our employees, their ambitions, dreams and challenges is what makes us a unique employer.

We are united by a shared commitment: to put our customers first and at the center of everything we do. Their needs inspire our thinking and guide our actions.

Together, we can build an environment where everyone feels empowered and confident to explore, grow and shape a better future - for our customers and for the world around us. At Allianz, we stand for unity: we believe that a united world is a more prosperous world, and we are dedicated to consistently advocating for equal opportunities for all. The foundation for this is our inclusive workplace, where people and performance both matter, and where integrity, fairness, inclusion and trust are at the heart of our culture.

We therefore welcome applications regardless of ethnicity or cultural background, age, gender, nationality, religion, social class, disability or sexual orientation, or any other characteristics protected under applicable local laws and regulations.

Join us. Let's care for tomorrow.