Hybrid Vulnerability Analyst — Security Risk & Remediation

Capgemini Engineering; Lisboa; Hybrid; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Hybrid work model

Health and life insurance

Referral program with attractive bonus

Job summary

Capgemini Engineering is seeking a Cybersecurity Analyst to join our vulnerability management team in Lisbon. The role covers analysis, monitoring, remediation, and reporting of security vulnerabilities across systems and cloud environments.

You will collaborate with infrastructure, cloud, and application teams to ensure timely remediation and governance alignment, while communicating risks to technical and business stakeholders.

Qualifications

• Experience in Vulnerability Management and/or Assessment.
• Experience as Cybersecurity Analyst, Vulnerability Analyst, or SOC Analyst with remediation tracking.
• Experience with Qualys, BitSight, or CrowdStrike.
• Knowledge of Windows, Linux, IP networking and cloud environments.

Responsibilities

• Analyze and follow up security vulnerabilities across systems.
• Monitor, analyze, and handle security events and findings.
• Manage lifecycle of vulnerabilities from detection to remediation and closure.
• Communicate risks and security findings to stakeholders.
• Perform security and compliance assessments per industry standards.
• Collaborate with infra, cloud, and app teams for remediation.
• Support governance activities and continuous improvement of vulnerability mgmt processes.
• Produce reports and metrics on exposure and remediation status.

Skills

Vulnerability Mgmt

Security Analysis

Cloud Security

Windows & Linux

Networking

Cloud Platforms

Container Knowledge

Compliance Frameworks

Stakeholder Commun

Tools

Qualys

BitSight

CrowdStrike

Job description

Capgemini Engineering is seeking a Cybersecurity Analyst to join our vulnerability management team in Lisbon. The role covers analysis, monitoring, remediation, and reporting of security vulnerabilities across systems and cloud environments.

You will collaborate with infrastructure, cloud, and application teams to ensure timely remediation and governance alignment, while communicating risks to technical and business stakeholders.