PSIRT Vulnerability Analyst – Product Security & IR

Capgemini; Vila Nova de Gaia; Hybrid; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Hybrid work

Training and certifications

Health and life insurance

Referral program

Great office locations

Job summary

Capgemini Engineering in Porto is seeking a security-focused professional to join the PSIRT team as an L2 analyst for vulnerability assessment across client products and services, including validation, triage, and remediation planning.

You will collaborate with engineering, product, and operations teams to validate findings, develop advisories, and support vulnerability disclosure. This role offers hybrid work and clear paths for career growth.

Qualifications

• Bachelor's degree in Cybersecurity, Computer Science, Engineering, Information Security, or equivalent.
• Experience in vulnerability management, product security, incident response, security operations, application security, or a related cybersecurity field.
• Knowledge of CVSS, CWE, CAPEC, and MITRE ATT&CK.
• Familiarity with SSDLC, IEC 62443, NIST Cybersecurity Framework, and ISO 27001 is preferred.
• Relevant cybersecurity certifications such as CISSP, GSEC, GCIH, GPEN, OSCP, Security+, or GIAC are preferred.

Responsibilities

• Perform L2 analysis, validation, and technical assessment of vulnerabilities affecting our client's products and services.
• Determine vulnerability exploitability, severity, business impact, and potential risk to customers and operations.
• Triage vulnerability reports from internal teams, external researchers, automated tools, and security assessments, and prioritize remediation activities.
• Collaborate with engineering, product, and operational teams to validate findings and drive vulnerabilities through remediation and closure.
• Support PSIRT investigations and coordinate vulnerability response activities, including tracking remediation against agreed SLAs and escalating critical risks.
• Develop and communicate vulnerability advisories, technical reports, risk assessments, and management updates to relevant stakeholders.
• Support customer, partner, and coordinated vulnerability disclosure activities.
• Contribute to the continuous improvement of PSIRT processes, tooling, metrics, reporting, and secure development practices.

Skills

Vulnerability management

Incident response

Security operations

Application security

Risk analysis

Vulnerability triage

Remediation processes

Education

Bachelor's degree

Tools

Vulnerability scanners

SCA

SAST

Vulnerability management tools

Network scanners

Job description

Capgemini Engineering in Porto is seeking a security-focused professional to join the PSIRT team as an L2 analyst for vulnerability assessment across client products and services, including validation, triage, and remediation planning.

You will collaborate with engineering, product, and operations teams to validate findings, develop advisories, and support vulnerability disclosure. This role offers hybrid work and clear paths for career growth.