Vulnerability Analyst

Capgemini Engineering; Lisboa; Hybrid; EUR 42.000 - 52.000; Vollzeit

Benefits dieser Stelle

Hybrid work model

Health and life insurance

Referral program with bonuses

International environment

Zusammenfassung

Capgemini Engineering seeks a Cybersecurity Analyst to join the vulnerability management team, focusing on identifying, analyzing, and remediating security vulnerabilities across diverse environments.

You will monitor security events, coordinate remediation with infrastructure, cloud, and application teams, and contribute to governance and improvement initiatives. The role requires collaboration with stakeholders and strong communication skills to convey risk and status.

Qualifikationen

• Experience in Vulnerability Management or Vulnerability Assessment.
• Experience as Cybersecurity Analyst, Vulnerability Analyst, Security Analyst, or SOC Analyst with remediation tracking and monitoring.
• Experience with security platforms such as Qualys, BitSight, and/or CrowdStrike.
• Solid knowledge of Windows, Linux, and IP networking environments.
• Experience with Cloud environments (AWS, Azure, and/or GCP).
• Knowledge of Containers and containerized environments.
• Understanding of CIS, NIST, ISO 27000, and OWASP.
• Ability to collaborate with technical teams and stakeholders to drive remediation activities.
• Strong analytical, organizational, and communication skills.

Aufgaben

• Analyzing and following up on security vulnerabilities across systems, infrastructures, and applications.
• Monitoring, analyzing, and handling security events and findings.
• Managing the lifecycle of identified vulnerabilities, from detection through remediation and closure.
• Communicating risks and security findings to technical and business stakeholders.
• Performing security and compliance assessments aligned with industry standards and best practices.
• Working closely with infrastructure, cloud, and application teams to ensure timely remediation of identified vulnerabilities.
• Supporting security governance activities and contributing to continuous improvement of vulnerability management processes.
• Producing reports and metrics on vulnerability exposure, remediation status, and overall security posture.

Kenntnisse

Vulnerability Management

Security Monitoring

Cloud security

Windows & Linux

AWS

Azure

GCP

Security platforms

IP Networking

Container security

Security frameworks

Jobbeschreibung

YOUR ROLE

Joining Capgemini Engineering as a Cybersecurity Analyst, you will become part of a cybersecurity team focused on Vulnerability Management, Security Monitoring, and continuous improvement of our clients' security posture.

In this role you will play a key role in:

• Performing analysis and follow-up of security vulnerabilities across systems, infrastructures, and applications.
• Monitoring, analyzing, and handling security events and findings.
• Managing the lifecycle of identified vulnerabilities, from detection through remediation and closure.
• Communicating risks and security findings to technical and business stakeholders.
• Performing security and compliance assessments aligned with industry standards and best practices.
• Working closely with infrastructure, cloud, and application teams to ensure timely remediation of identified vulnerabilities.
• Supporting security governance activities and contributing to continuous improvement of vulnerability management processes.
• Producing reports and metrics on vulnerability exposure, remediation status, and overall security posture.

YOUR PROFILE

• Experience in Vulnerability Management and/or Vulnerability Assessment activities.
• Experience working as a Cybersecurity Analyst, Vulnerability Analyst, Security Analyst, or SOC Analyst, with proven involvement in vulnerability analysis, remediation tracking, and security monitoring.
• Experience with security platforms such as Qualys, BitSight, and/or CrowdStrike.
• Solid knowledge of Windows, Linux, and IP networking environments.
• Experience working with Cloud environments (AWS, Azure, and/or GCP).
• Knowledge of Containers and containerized environments.
• Understanding of information security and compliance frameworks, including CIS, NIST, ISO 27000, and OWASP.
• Ability to collaborate effectively with technical teams and stakeholders to drive remediation activities.
• Strong analytical, organizational, and communication skills.

Mandatory Skills

• Knowledge of network security technologies and services across Microsoft, Linux, and Container environments.
• Cloud security knowledge in AWS, Azure, and GCP.
• Experience with firewall technologies, namely Check Point, Fortinet, and Cisco.
• Knowledge of security frameworks and auditing standards, including CIS, NIST, ISO 27K, and OWASP.

Nice to Have

• Experience in Security Operations Centre (SOC) environments.
• Hands‑on experience with security monitoring and incident analysis.
• Scripting and automation skills using PowerShell and/or Shell Script.
• Relevant cybersecurity certifications (Security+, CySA+, SC-200, Qualys certifications or similar).

What You'll Love About Working Here

• Join a multicultural and collaborative environment.
• Work on challenging cybersecurity projects across multiple industries
• .Access continuous learning opportunities, certification programs, and career development plans.
• Hybrid and flexible work model.Health and life insurance.Referral program with attractive bonuses.
• International environment with opportunities for growth and mobility.
• Modern offices and excellent team culture.

About Capgemini

Capgemini is the business transformation partner for organizations seeking to accelerate their transition to a digital and sustainable world. Combining deep industry expertise with strengths in cloud, data, AI, engineering, and cybersecurity, Capgemini helps clients unlock innovation and create tangible business value. With a presence in more than 50 countries and a diverse global team, Capgemini continues to shape the future of technology and business transformation.