Product Security Incident Response Team (PSIRT) Vulnerability Analyst

Capgemini Engineering; Porto; Presencial; EUR 28 000 - 45 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Health and life insurance

Referral program with bonuses

Training and certifications programs

Great office locations

Resumo da oferta

Capgemini Engineering is seeking a cybersecurity professional to join our security team in Porto. You will perform vulnerability analysis, triage, and risk assessment across client products and services, coordinating remediation with engineering and operations.

PSIRT investigations and vulnerability disclosures are part of your responsibilities. The role demands hands-on experience in vulnerability management, incident response, and secure development practices, with exposure to industry

Qualificações

• Bachelor's degree or equivalent professional experience in cybersecurity.
• Experience in vulnerability management, product security, incident response, security operations, or related cybersecurity field.
• Strong understanding of vulnerability assessment, risk analysis, vulnerability triage, and remediation processes.
• Experience with software/firmware/OS/network/embedded/OT environments.

Responsabilidades

• Perform L2 analysis, validation, and technical assessment of vulnerabilities affecting client products and services
• Determine exploitability, severity, business impact, and risk to customers and operations
• Triage vulnerability reports from internal teams, external researchers, automated tools, and security assessments
• Collaborate with engineering, product, and operations teams to validate findings and drive remediation
• Support PSIRT investigations and coordinate vulnerability response activities
• Develop and communicate vulnerability advisories, technical reports, and risk assessments
• Support customer, partner, and coordinated vulnerability disclosure activities
• Contribute to continuous improvement of PSIRT processes and tooling

Conhecimentos

Vulnerability management

Product security

Incident response

Security operations

Application security

Vulnerability assessment

Risk analysis

Formação académica

Bachelor's degree in Cybersecurity/CS/Engineering/Info Security

Ferramentas

SCA

SAST

Vulnerability scanners

Descrição da oferta de emprego

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries. Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

YOUR ROLE

• Perform L2 analysis, validation, and technical assessment of vulnerabilities affecting our client's products and services.
• Determine vulnerability exploitability, severity, business impact, and potential risk to customers and operations.
• Triage vulnerability reports from internal teams, external researchers, automated tools, and security assessments, and prioritize remediation activities.
• Collaborate with engineering, product, and operational teams to validate findings and drive vulnerabilities through remediation and closure.
• Support PSIRT investigations and coordinate vulnerability response activities, including tracking remediation against agreed SLAs and escalating critical risks.
• Develop and communicate vulnerability advisories, technical reports, risk assessments, and management updates to relevant stakeholders.
• Support customer, partner, and coordinated vulnerability disclosure activities.
• Contribute to the continuous improvement of PSIRT processes, tooling, metrics, reporting, and secure development practices.

YOUR PROFILE

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Security, or equivalent professional experience.
• Experience in vulnerability management, product security, incident response, security operations, application security, or a related cybersecurity field.
• Strong understanding of vulnerability assessment, risk analysis, vulnerability triage, and remediation processes.
• Experience analyzing software, firmware, operating systems, network infrastructure, embedded systems, and/or OT/ICS environments.
• Knowledge of common vulnerability classes, attack techniques, exploitation concepts, and remediation approaches, with familiarity with CVSS, CWE, CAPEC, and MITRE ATT&CK.
• Experience with security testing and vulnerability management tools, such as SCA, SAST, vulnerability management platforms, and network/infrastructure scanners.
• Knowledge of SSDLC, IEC 62443, NIST Cybersecurity Framework, and ISO 27001 is preferred.
• Relevant cybersecurity certifications such as CISSP, GSEC, GCIH, GPEN, OSCP, Security+, or GIAC are preferred.

WHAT YOU’LL LOVE ABOUT WORKING HERE

• Join a multicultural and inclusive team environment.
• Enjoy a supportive atmosphere promoting work-life balance.
• Engage in exciting national and international projects.
• Your career growth is central to our mission. Our array of career growth programs and diverse professionals are crafted to support you in exploring a world of opportunities.
• Training and certifications programs.
• Health and life insurance.
• Referral program with bonuses for talent recommendations.
• Great office locations.

ABOUT CAPGEMINI

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology, and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations.