Industrial Cybersecurity Vulnerability Lead

Vestas; Porto; Hybrid; EUR 45,000 - 75,000; Full time

Job summary

Vestas Technology & Operations in Porto, Portugal, is seeking a Work Experience Specialist within Software Product Delivery and Security. The role focuses on vulnerability management across power plant products and supporting infrastructure, applying CVSS-based risk scoring and coordinating patch remediation efforts.

Ideal candidates have 5+ years in vulnerability management, familiarity with IEC 62443, and strong analytical and communication skills to translate technical findings into

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field (or equivalent experience)
• Minimum of 5 years of practical experience, mainly with vulnerability management platforms and tools
• Solid knowledge of vulnerability assessment frameworks, including CVSS
• Familiarity with industrial cybersecurity standards, especially IEC 62443, including SL-C and SL-T concepts
• Understanding of asset inventory management and configuration management practices
• Fluency in English (written and spoken)
• Solid analytical skills with the ability to assess technical vulnerabilities and translate them into business risk
• Proficiency in risk-based prioritization and decision-making in complex, safety-critical environments
• Solid understanding of CVSS scoring and the ability to apply or adapt custom risk models
• Effective communication skills, with the ability to convey technical findings to non-technical stakeholders
• Solid organizational skills, with attention to detail and the ability to manage multiple vulnerabilities simultaneously
• Collaborative mindset, working effectively across security, engineering, compliance, and operations teams
• Problem-solving ability and a forward-thinking approach to risk mitigation

Responsibilities

• Monitor, track, and manage reported vulnerabilities across power plant products, systems, and supporting infrastructure
• Perform vulnerability analysis, including assessing exploitability and determining potential impact
• Calculate and maintain risk scores using CVSS and internal risk assessment methodologies
• Prioritize vulnerabilities based on risk, business impact, and operational criticality
• Define and coordinate mitigation and remediation plans, including patch management activities
• Collaborate with engineering, operations, and security teams to ensure timely resolution of vulnerabilities
• Maintain visibility of vulnerability status and provide regular reporting to stakeholders
• Ensure alignment with cybersecurity standards, particularly IEC 62443, in vulnerability handling processes

Education

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field (or equivalent experience)

Job description

Vestas Technology & Operations in Porto, Portugal, is seeking a Work Experience Specialist within Software Product Delivery and Security. The role focuses on vulnerability management across power plant products and supporting infrastructure, applying CVSS-based risk scoring and coordinating patch remediation efforts.

Ideal candidates have 5+ years in vulnerability management, familiarity with IEC 62443, and strong analytical and communication skills to translate technical findings into