Senior Vulnerability Management Engineer

Decskill; Porto; On-site; EUR 40,000 - 65,000; Full time

Job summary

Decskill, an Astek Group member, seeks a Vulnerability Management Specialist to strengthen cybersecurity across our IT landscape in Portugal. You will own the vulnerability management program, ensure regular scans, and coordinate remediation with IT and security teams.

You will analyze scan results, prioritize risks, oversee patch deployment, and contribute to secure code reviews and risk management. Fluent English required.

Qualifications

• Minimum 5 years of experience in IT with hands-on Vulnerability Management, Cybersecurity, or Infrastructure Security.
• Strong understanding of vulnerability assessment, risk prioritization, and remediation processes.
• Experience with vulnerability scanning tools (Qualys, Nessus, Rapid7 InsightVM) or equivalent.
• Knowledge of patch management processes and vulnerability lifecycle management.
• Experience coordinating penetration testing activities and remediation plans.
• Understanding of secure code review practices and application security concepts.
• Broad knowledge of IT infrastructure and enterprise applications.
• Familiarity with cybersecurity frameworks and risk management practices.
• Excellent communication and stakeholder management skills across international teams.
• Cybersecurity certifications (Security+, CEH, CISSP, GSEC) or equivalent are a strong advantage.
• Fluent written and spoken English.

Responsibilities

• Manage and continuously improve the Vulnerability Management program.
• Ensure assets are scanned for vulnerabilities and remediation tracked to completion.
• Monitor deployment of critical security patches and remediation across environments.
• Prioritize risks from scan results and coordinate remediation with IT and security teams.
• Identify systems affected by newly released vulnerabilities and communicate requirements.
• Coordinate and monitor penetration testing activities, reporting, and remediation follow-up.
• Review penetration test findings and align remediation with cybersecurity standards.
• Ensure regular secure code reviews for eligible applications and systems.
• Produce reports on vulnerability management, patch compliance, and remediation progress.
• Collaborate with global cybersecurity teams and business units to improve security processes.

Skills

Vulnerability Management

Cybersecurity

Patch management

Penetration testing

Secure code review

Excel (advanced)

English proficiency

Tools

Qualys

Tenable Nessus

Rapid7 InsightVM

Job description

Decskill, an Astek Group member, seeks a Vulnerability Management Specialist to strengthen cybersecurity across our IT landscape in Portugal. You will own the vulnerability management program, ensure regular scans, and coordinate remediation with IT and security teams.

You will analyze scan results, prioritize risks, oversee patch deployment, and contribute to secure code reviews and risk management. Fluent English required.