Plant Security Specialist

Vestas; Leça do Balio; Híbrido; EUR 55 000 - 85 000; Tempo integral

Resumo da oferta

Vestas is seeking a Security Vulnerability Management specialist to join the R&D Software Product Delivery and Security team in Porto. You will own vulnerability assessment, risk scoring, and remediation coordination to keep industrial software safe and compliant.

Join a hybrid role based in Porto, with exposure to IEC 62443 standards, CVSS frameworks, and collaboration across engineering, security, and operations to continuously improve the platform's security posture.

Qualificações

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field.
• Minimum of 5 years of practical vulnerability management experience.
• Strong knowledge of CVSS and IEC 62443 standards.
• Experience with asset inventory and configuration management.
• Fluent in English (written and spoken).

Responsabilidades

• Monitor, track, and manage reported vulnerabilities across products, systems, and infrastructure.
• Perform vulnerability analysis, including assessing exploitability and impact.
• Calculate and maintain risk scores using CVSS and internal methods.
• Prioritize vulnerabilities based on risk, business impact, and criticality.
• Define and coordinate mitigation and remediation plans including patching.
• Collaborate with engineering, operations, and security teams to ensure timely resolution.
• Maintain visibility of vulnerability status and provide regular reporting.
• Ensure alignment with cybersecurity standards, especially IEC 62443, in handling processes.

Conhecimentos

Vulnerability management

CVSS

IEC 62443

Risk assessment

Asset inventory management

Security communications

English fluency

Formação académica

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or related field

Ferramentas

Vulnerability management platforms

Threat intelligence tools

Descrição da oferta de emprego

Are you on the lookout for your next big career move?

Vestas Technology & Operations > Research & Development (R&D) > Software Product Delivery and Security

Software Product Delivery and Security is the platform engineering and DevOps enablement team at Vestas, responsible for building, running, securing, and evolving the Internal Developer Platform - the shared infrastructure, tooling, and practices that hundreds of application developers rely on to develop, deliver, and operate their software. We own and continuously enhance the security posture of the platform, including Kubernetes clusters, CI/CD pipelines, observability stack, secrets management, and source code hosting, ensuring secure-by-design and secure-by-default capabilities across software delivery for the Turbine and Power Plant domains. This includes embedding cybersecurity controls, supporting vulnerability management, enforcing secure development practices, and aligning with industry standards for industrial and enterprise cybersecurity. We are a small, tight-knit team split between Aarhus, Denmark, and Porto, Portugal. Everyone owns a real domain and operates with a high degree of self-direction - while maintaining a shared sense of responsibility for both platform reliability and cybersecurity. We stay closely aligned, quickly address risks, and take each other's operational and security challenges seriously.

Responsibilities

• Monitor, track, and manage reported vulnerabilities across power plant products, systems, and supporting infrastructure
• Perform vulnerability analysis, including assessing exploitability and determining potential impact
• Calculate and maintain risk scores using CVSS and internal risk assessment methodologies
• Prioritize vulnerabilities based on risk, business impact, and operational criticality
• Define and coordinate mitigation and remediation plans, including patch management activities
• Collaborate with engineering, operations, and security teams to ensure timely resolution of vulnerabilities
• Maintain visibility of vulnerability status and provide regular reporting to stakeholders
• Ensure alignment with cybersecurity standards, particularly IEC 62443, in vulnerability handling processes

Qualifications

• Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field (or equivalent experience)
• Minimum of 5 years of practical experience, mainly with vulnerability management platforms and tools
• Solid knowledge of vulnerability assessment frameworks, including CVSS
• Familiarity with industrial cybersecurity standards, especially IEC 62443, including SL-C and SL-T concepts
• Understanding of asset inventory management and configuration management practices
• Fluency in English (written and spoken)

Competencies

• Solid analytical skills with the ability to assess technical vulnerabilities and translate them into business risk
• Proficiency in risk-based prioritization and decision-making in complex, safety-critical environments
• Solid understanding of CVSS scoring and the ability to apply or adapt custom risk models
• Effective communication skills, with the ability to convey technical findings to non-technical stakeholders
• Solid organizational skills, with attention to detail and the ability to manage multiple vulnerabilities simultaneously
• Collaborative mindset, working effectively across security, engineering, compliance, and operations teams
• Problem-solving ability and a forward-thinking approach to risk mitigation

What We Offer

We offer an environment where your interest in continuous learning and development can truly thrive. You will join an informal, agile workplace that provides a high degree of ownership in shaping the path forward. While we expect our team members to take full responsibility for their tasks and deadlines, we equally value celebrating achievements and learning from setbacks together.

Additional Information

This is a hybrid position based in Porto, Portugal, and requires up to 5 travel days per year.

Please note: We reserve the right to amend or withdraw this job posting at any time.

Our commitment to a fair hiring

At Vestas, we evaluate all candidates solely based on their professional experience, education, and relevant skills. To support a fair recruitment process, we kindly ask that you remove any photos, dates of birth or graduation, gender pronouns, marital status, or other personal information not relevant to the role before submitting your CV/resume. Your CV/resume should focus on your professional and educational background, along with the necessary contact details (email and phone number). We train our hiring teams in inclusive evaluation and regularly review process outcomes to ensure fairness.

DEIB Statement

At Vestas, we recognize the value of diversity, equity, and inclusion in driving innovation and success. We strongly encourage individuals from all backgrounds to apply, particularly those who may hesitate due to their identity or feel they do not meet every criterion. As our CEO states, "Expertise and talent come in many forms, and a diverse workforce enhances our ability to think differently and solve the complex challenges of our industry". Your unique perspective is what will help us powering the solution for a sustainable, green energy future.

About Vestas

Vestas is the energy industry’s global partner on sustainable energy solutions. We are specialised in designing, manufacturing, installing, and servicing wind turbines, both onshore and offshore.

Across the globe, we have installed more wind power than anyone else. We consider ourselves pioneers within the industry, as we continuously aim to design new solutions and technologies to create a more sustainable future for all of us. With more than 200 GW of wind power installed worldwide and 40+ years of experience in wind energy, we have an unmatched track record demonstrating our expertise within the field.

With 39,000 employees globally, we are a diverse team united by a common goal: to power the solution – today, tomorrow, and far into the future.

Vestas promotes a diverse workforce which embraces all social identities and is free of any discrimination. We commit to create and sustain an environment that acknowledges and harvests different experiences, skills, and perspectives. We also aim to give everyone equal access to opportunity.

To learn more about our company and life at Vestas, we invite you to visit our website at www.vestas.com and follow us on our social media channels. We also encourage you to join our Talent Universe to receive notifications on new and relevant postings.