PSIRT Vulnerability Analyst - Incident Response

Capgemini Engineering; Vila Nova de Gaia; Hybrid; EUR 42,000 - 76,000; Full time

Benefits offered by this job

Hybrid work

Health and life insurance

Referral program with bonuses

Training and certifications

Career growth programs

Great office locations

Work-life balance

Job summary

Capgemini Engineering seeks a cybersecurity professional to perform L2 analysis, validate vulnerabilities, and drive remediation across client products and services. You will triage reports, assess exploitability and risk, and collaborate with engineering and operations to close gaps.

Join a multinational security team focused on PSIRT activities, vulnerability advisories, and continuous improvement of secure development processes. Hybrid work model offered with opportunities for growth.

Qualifications

• Bachelor's degree in Cybersecurity, CS, Engineering, Information Security, or equivalent.
• Experience in vulnerability management, product security, incident response, security operations, or related cybersecurity field.
• Strong understanding of vulnerability assessment, risk analysis, vulnerability triage, and remediation processes.
• Experience analyzing software, firmware, operating systems, network infrastructure, embedded systems, and/or OT/ICS environments.
• Knowledge of CVSS, CWE, CAPEC, and MITRE ATT&CK.
• Experience with security testing and vulnerability management tools, such as SCA, SAST, vulnerability management platforms, and network/infrastructure scanners.
• Knowledge of SDLC, IEC 62443, NIST CSF, and ISO 27001; relevant certifications preferred.

Responsibilities

• Perform L2 analysis, validation, and technical assessment of vulnerabilities affecting our client's products and services.
• Determine vulnerability exploitability, severity, business impact, and potential risk to customers and operations.
• Triage vulnerability reports from internal teams, external researchers, automated tools, and security assessments, and prioritize remediation activities.
• Collaborate with engineering, product, and operational teams to validate findings and drive vulnerabilities through remediation and closure.
• Support PSIRT investigations and coordinate vulnerability response activities, including tracking remediation against agreed SLAs and escalating critical risks.
• Develop and communicate vulnerability advisories, technical reports, risk assessments, and management updates to relevant stakeholders.
• Support customer, partner, and coordinated vulnerability disclosure activities.
• Contribute to continuous improvement of PSIRT processes, tooling, metrics, reporting, and secure development practices.

Skills

Vulnerability management

Incident response

Security operations

Application security

Vulnerability assessment

Risk analysis

MITRE ATT&CK knowledge

Education

Bachelor's degree in Cybersecurity or related field

Tools

SCA

SAST

Vulnerability management platforms

Network/infrastructure scanners

Job description

CAPGEMINI ENGINEERING

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries. Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

CAPGEMINI ENGINEERING

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world’s most innovative companies unleash their potential. From autonomous cars to life-saving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries. Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

YOUR ROLE

• Perform L2 analysis, validation, and technical assessment of vulnerabilities affecting our client's products and services.
• Determine vulnerability exploitability, severity, business impact, and potential risk to customers and operations.
• Triage vulnerability reports from internal teams, external researchers, automated tools, and security assessments, and prioritize remediation activities.
• Collaborate with engineering, product, and operational teams to validate findings and drive vulnerabilities through remediation and closure.
• Support PSIRT investigations and coordinate vulnerability response activities, including tracking remediation against agreed SLAs and escalating critical risks.
• Develop and communicate vulnerability advisories, technical reports, risk assessments, and management updates to relevant stakeholders.
• Support customer, partner, and coordinated vulnerability disclosure activities.
• Contribute to the continuous improvement of PSIRT processes, tooling, metrics, reporting, and secure development practices.
  
  

YOUR PROFILE

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Security, or equivalent professional experience.
• Experience in vulnerability management, product security, incident response, security operations, application security, or a related cybersecurity field.
• Strong understanding of vulnerability assessment, risk analysis, vulnerability triage, and remediation processes.
• Experience analyzing software, firmware, operating systems, network infrastructure, embedded systems, and/or OT/ICS environments.
• Knowledge of common vulnerability classes, attack techniques, exploitation concepts, and remediation approaches, with familiarity with CVSS, CWE, CAPEC, and MITRE ATT&CK.
• Experience with security testing and vulnerability management tools, such as SCA, SAST, vulnerability management platforms, and network/infrastructure scanners.
• Knowledge of SSDLC, IEC 62443, NIST Cybersecurity Framework, and ISO 27001 is preferred.
• Relevant cybersecurity certifications such as CISSP, GSEC, GCIH, GPEN, OSCP, Security+, or GIAC are preferred.
  
  

What You’ll Love About Working Here

• Join a multicultural and inclusive team environment.
• Enjoy a supportive atmosphere promoting work-life balance.
• Engage in exciting national and international projects.
• Hybrid work.
• Your career growth is central to our mission. Our array of career growth programs and diverse professionals are crafted to support you in exploring a world of opportunities.
• Training and certifications programs.
• Health and life insurance.
• Referral program with bonuses for talent recommendations.
• Great office locations.
  
  

About Capgemini

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology, and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations.