Industrial Cybersecurity & Vulnerability Lead

Vestas; Leça do Balio; Híbrido; EUR 55 000 - 85 000; Tempo integral

Resumo da oferta

Vestas is seeking a Security Vulnerability Management specialist to join the R&D Software Product Delivery and Security team in Porto. You will own vulnerability assessment, risk scoring, and remediation coordination to keep industrial software safe and compliant.

Join a hybrid role based in Porto, with exposure to IEC 62443 standards, CVSS frameworks, and collaboration across engineering, security, and operations to continuously improve the platform's security posture.

Qualificações

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field.
• Minimum of 5 years of practical vulnerability management experience.
• Strong knowledge of CVSS and IEC 62443 standards.
• Experience with asset inventory and configuration management.
• Fluent in English (written and spoken).

Responsabilidades

• Monitor, track, and manage reported vulnerabilities across products, systems, and infrastructure.
• Perform vulnerability analysis, including assessing exploitability and impact.
• Calculate and maintain risk scores using CVSS and internal methods.
• Prioritize vulnerabilities based on risk, business impact, and criticality.
• Define and coordinate mitigation and remediation plans including patching.
• Collaborate with engineering, operations, and security teams to ensure timely resolution.
• Maintain visibility of vulnerability status and provide regular reporting.
• Ensure alignment with cybersecurity standards, especially IEC 62443, in handling processes.

Conhecimentos

Vulnerability management

CVSS

IEC 62443

Risk assessment

Asset inventory management

Security communications

English fluency

Formação académica

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field

Ferramentas

Vulnerability management platforms

Threat intelligence tools

Descrição da oferta de emprego

Vestas is seeking a Security Vulnerability Management specialist to join the R&D Software Product Delivery and Security team in Porto. You will own vulnerability assessment, risk scoring, and remediation coordination to keep industrial software safe and compliant.

Join a hybrid role based in Porto, with exposure to IEC 62443 standards, CVSS frameworks, and collaboration across engineering, security, and operations to continuously improve the platform's security posture.