Product Security Incident Response Team (PSIRT) Vulnerability Analyst

Capgemini; Vila Nova de Gaia; Híbrido; EUR 55 000 - 75 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work

Training and certifications

Health and life insurance

Referral program

Great office locations

Resumo da oferta

Capgemini Engineering in Porto is seeking a security-focused professional to join the PSIRT team as an L2 analyst for vulnerability assessment across client products and services, including validation, triage, and remediation planning.

You will collaborate with engineering, product, and operations teams to validate findings, develop advisories, and support vulnerability disclosure. This role offers hybrid work and clear paths for career growth.

Qualificações

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Security, or equivalent.
• Experience in vulnerability management, product security, incident response, security operations, application security, or a related cybersecurity field.
• Knowledge of CVSS, CWE, CAPEC, and MITRE ATT&CK.
• Familiarity with SSDLC, IEC 62443, NIST Cybersecurity Framework, and ISO 27001 is preferred.
• Relevant cybersecurity certifications such as CISSP, GSEC, GCIH, GPEN, OSCP, Security+, or GIAC are preferred.

Responsabilidades

• Perform L2 analysis, validation, and technical assessment of vulnerabilities affecting our client's products and services.
• Determine vulnerability exploitability, severity, business impact, and potential risk to customers and operations.
• Triage vulnerability reports from internal teams, external researchers, automated tools, and security assessments, and prioritize remediation activities.
• Collaborate with engineering, product, and operational teams to validate findings and drive vulnerabilities through remediation and closure.
• Support PSIRT investigations and coordinate vulnerability response activities, including tracking remediation against agreed SLAs and escalating critical risks.
• Develop and communicate vulnerability advisories, technical reports, risk assessments, and management updates to relevant stakeholders.
• Support customer, partner, and coordinated vulnerability disclosure activities.
• Contribute to the continuous improvement of PSIRT processes, tooling, metrics, reporting, and secure development practices.

Conhecimentos

Vulnerability management

Incident response

Security operations

Application security

Risk analysis

Vulnerability triage

Remediation processes

Formação académica

Bachelor's degree

Ferramentas

Vulnerability scanners

SCA

SAST

Vulnerability management tools

Network scanners

Descrição da oferta de emprego

CAPGEMINI ENGINEERINGAt Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries. Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.YOUR ROLEPerform L2 analysis, validation, and technical assessment of vulnerabilities affecting our client's products and services.Determine vulnerability exploitability, severity, business impact, and potential risk to customers and operations.Triage vulnerability reports from internal teams, external researchers, automated tools, and security assessments, and prioritize remediation activities.Collaborate with engineering, product, and operational teams to validate findings and drive vulnerabilities through remediation and closure.Support PSIRT investigations and coordinate vulnerability response activities, including tracking remediation against agreed SLAs and escalating critical risks.Develop and communicate vulnerability advisories, technical reports, risk assessments, and management updates to relevant stakeholders.Support customer, partner, and coordinated vulnerability disclosure activities.Contribute to the continuous improvement of PSIRT processes, tooling, metrics, reporting, and secure development practices.YOUR PROFILEBachelor's degree in Cybersecurity, Computer Science, Engineering, Information Security, or equivalent professional experience.Experience in vulnerability management, product security, incident response, security operations, application security, or a related cybersecurity field.Strong understanding of vulnerability assessment, risk analysis, vulnerability triage, and remediation processes.Experience analyzing software, firmware, operating systems, network infrastructure, embedded systems, and/or OT/ICS environments.Knowledge of common vulnerability classes, attack techniques, exploitation concepts, and remediation approaches, with familiarity with CVSS, CWE, CAPEC, and MITRE ATT&CK.Experience with security testing and vulnerability management tools, such as SCA, SAST, vulnerability management platforms, and network/infrastructure scanners.Knowledge of SSDLC, IEC 62443, NIST Cybersecurity Framework, and ISO 27001 is preferred.Relevant cybersecurity certifications such as CISSP, GSEC, GCIH, GPEN, OSCP, Security+, or GIAC are preferred.WHAT YOU’LL LOVE ABOUT WORKING HEREJoin a multicultural and inclusive team environment.Enjoy a supportive atmosphere promoting work-life balance.Engage in exciting national and international projects.Hybrid work.Your career growth is central to our mission. Our array of career growth programs and diverse professionals are crafted to support you in exploring a world of opportunities.Training and certifications programs.Health and life insurance.Referral program with bonuses for talent recommendations.Great office locations.ABOUT CAPGEMINICapgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology, and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations.