PSIRT Vulnerability Analyst - Incident Response

Capgemini Engineering; Vila Nova de Gaia; Híbrido; EUR 42 000 - 76 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work

Health and life insurance

Referral program with bonuses

Training and certifications

Career growth programs

Great office locations

Work-life balance

Resumo da oferta

Capgemini Engineering seeks a cybersecurity professional to perform L2 analysis, validate vulnerabilities, and drive remediation across client products and services. You will triage reports, assess exploitability and risk, and collaborate with engineering and operations to close gaps.

Join a multinational security team focused on PSIRT activities, vulnerability advisories, and continuous improvement of secure development processes. Hybrid work model offered with opportunities for growth.

Qualificações

• Bachelor's degree in Cybersecurity, CS, Engineering, Information Security, or equivalent.
• Experience in vulnerability management, product security, incident response, security operations, or related cybersecurity field.
• Strong understanding of vulnerability assessment, risk analysis, vulnerability triage, and remediation processes.
• Experience analyzing software, firmware, operating systems, network infrastructure, embedded systems, and/or OT/ICS environments.
• Knowledge of CVSS, CWE, CAPEC, and MITRE ATT&CK.
• Experience with security testing and vulnerability management tools, such as SCA, SAST, vulnerability management platforms, and network/infrastructure scanners.
• Knowledge of SDLC, IEC 62443, NIST CSF, and ISO 27001; relevant certifications preferred.

Responsabilidades

• Perform L2 analysis, validation, and technical assessment of vulnerabilities affecting our client's products and services.
• Determine vulnerability exploitability, severity, business impact, and potential risk to customers and operations.
• Triage vulnerability reports from internal teams, external researchers, automated tools, and security assessments, and prioritize remediation activities.
• Collaborate with engineering, product, and operational teams to validate findings and drive vulnerabilities through remediation and closure.
• Support PSIRT investigations and coordinate vulnerability response activities, including tracking remediation against agreed SLAs and escalating critical risks.
• Develop and communicate vulnerability advisories, technical reports, risk assessments, and management updates to relevant stakeholders.
• Support customer, partner, and coordinated vulnerability disclosure activities.
• Contribute to continuous improvement of PSIRT processes, tooling, metrics, reporting, and secure development practices.

Conhecimentos

Vulnerability management

Incident response

Security operations

Application security

Vulnerability assessment

Risk analysis

MITRE ATT&CK knowledge

Formação académica

Bachelor's degree in Cybersecurity or related field

Ferramentas

SCA

SAST

Vulnerability management platforms

Network/infrastructure scanners

Descrição da oferta de emprego

Capgemini Engineering seeks a cybersecurity professional to perform L2 analysis, validate vulnerabilities, and drive remediation across client products and services. You will triage reports, assess exploitability and risk, and collaborate with engineering and operations to close gaps.

Join a multinational security team focused on PSIRT activities, vulnerability advisories, and continuous improvement of secure development processes. Hybrid work model offered with opportunities for growth.