Industrial Cybersecurity & Vulnerability Lead

Vestas; Leça do Balio; Hybrid; EUR 55,000 - 85,000; Full time

Job summary

Vestas is seeking a Security Vulnerability Management specialist to join the R&D Software Product Delivery and Security team in Porto. You will own vulnerability assessment, risk scoring, and remediation coordination to keep industrial software safe and compliant.

Join a hybrid role based in Porto, with exposure to IEC 62443 standards, CVSS frameworks, and collaboration across engineering, security, and operations to continuously improve the platform's security posture.

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field.
• Minimum of 5 years of practical vulnerability management experience.
• Strong knowledge of CVSS and IEC 62443 standards.
• Experience with asset inventory and configuration management.
• Fluent in English (written and spoken).

Responsibilities

• Monitor, track, and manage reported vulnerabilities across products, systems, and infrastructure.
• Perform vulnerability analysis, including assessing exploitability and impact.
• Calculate and maintain risk scores using CVSS and internal methods.
• Prioritize vulnerabilities based on risk, business impact, and criticality.
• Define and coordinate mitigation and remediation plans including patching.
• Collaborate with engineering, operations, and security teams to ensure timely resolution.
• Maintain visibility of vulnerability status and provide regular reporting.
• Ensure alignment with cybersecurity standards, especially IEC 62443, in handling processes.

Skills

Vulnerability management

CVSS

IEC 62443

Risk assessment

Asset inventory management

Security communications

English fluency

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field

Tools

Vulnerability management platforms

Threat intelligence tools

Job description

Vestas is seeking a Security Vulnerability Management specialist to join the R&D Software Product Delivery and Security team in Porto. You will own vulnerability assessment, risk scoring, and remediation coordination to keep industrial software safe and compliant.

Join a hybrid role based in Porto, with exposure to IEC 62443 standards, CVSS frameworks, and collaboration across engineering, security, and operations to continuously improve the platform's security posture.