Vulnerability Analyst

Capgemini Engineering; Lisboa; Hybrid; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Hybrid work model

Health and life insurance

Referral program with attractive bonus

Job summary

Capgemini Engineering is seeking a Cybersecurity Analyst to join our vulnerability management team in Lisbon. The role covers analysis, monitoring, remediation, and reporting of security vulnerabilities across systems and cloud environments.

You will collaborate with infrastructure, cloud, and application teams to ensure timely remediation and governance alignment, while communicating risks to technical and business stakeholders.

Qualifications

• Experience in Vulnerability Management and/or Assessment.
• Experience as Cybersecurity Analyst, Vulnerability Analyst, or SOC Analyst with remediation tracking.
• Experience with Qualys, BitSight, or CrowdStrike.
• Knowledge of Windows, Linux, IP networking and cloud environments.

Responsibilities

• Analyze and follow up security vulnerabilities across systems.
• Monitor, analyze, and handle security events and findings.
• Manage lifecycle of vulnerabilities from detection to remediation and closure.
• Communicate risks and security findings to stakeholders.
• Perform security and compliance assessments per industry standards.
• Collaborate with infra, cloud, and app teams for remediation.
• Support governance activities and continuous improvement of vulnerability mgmt processes.
• Produce reports and metrics on exposure and remediation status.

Skills

Vulnerability Mgmt

Security Analysis

Cloud Security

Windows & Linux

Networking

Cloud Platforms

Container Knowledge

Compliance Frameworks

Stakeholder Commun

Tools

Qualys

BitSight

CrowdStrike

Job description

CAPGEMINI ENGINEERING

At Capgemini Engineering, the world leader in engineering services, we bring together a global team of engineers, scientists, and architects to help the world's most innovative companies unleash their potential. From autonomous cars to lifesaving robots, our digital and software technology experts think outside the box as they provide unique R&D and engineering services across all industries.

Join us for a career full of opportunities. Where you can make a difference. Where no two days are the same.

YOUR ROLE

• Performing analysis and follow-up of security vulnerabilities across systems, infrastructures, and applications.
• Monitoring, analyzing, and handling security events and findings.
• Managing the lifecycle of identified vulnerabilities, from detection through remediation and closure.
• Communicating risks and security findings to technical and business stakeholders.
• Performing security and compliance assessments aligned with industry standards and best practices.
• Working closely with infrastructure, cloud, and application teams to ensure timely remediation of identified vulnerabilities.
• Supporting security governance activities and contributing to continuous improvement of vulnerability management processes.
• Producing reports and metrics on vulnerability exposure, remediation status, and overall security posture.

YOUR PROFILE

• Experience in Vulnerability Management and/or Vulnerability Assessment activities.
• Experience working as a Cybersecurity Analyst, Vulnerability Analyst, Security Analyst, or SOC Analyst, with proven involvement in vulnerability analysis, remediation tracking, and security monitoring.
• Experience with security platforms such as Qualys, BitSight, and/or CrowdStrike.
• Solid knowledge of Windows, Linux, and IP networking environments.
• Experience working with Cloud environments (AWS, Azure, and/or GCP).
• Knowledge of Containers and containerized environments.
• Understanding of information security and compliance frameworks, including CIS, NIST, ISO 27000, and OWASP.
• Ability to collaborate effectively with technical teams and stakeholders to drive remediation activities.
• Strong analytical, organizational, and communication skills.

Mandatory Skills

• Knowledge of network security technologies and services across Microsoft, Linux, and Container environments.
• Cloud security knowledge in AWS, Azure, and GCP.
• Experience with firewall technologies, namely Check Point, Fortinet, and Cisco.
• Knowledge of security frameworks and auditing standards, including CIS, NIST, ISO 27K, and OWASP.

Nice to Have

• Experience in Security Operations Centre (SOC) environments.
• Hands-on experience with security monitoring and incident analysis.
• Scripting and automation skills using PowerShell and/or Shell Script.
• Relevant cybersecurity certifications (Security+, CySA+, SC-200, Qualys certifications or similar).

What You’ll Love About Working Here

• Join a multicultural and collaborative environment.
• Work on challenging cybersecurity projects across multiple industries
• .Access continuous learning opportunities, certification programs, and career development plans.
• Hybrid and flexible work model.Health and life insurance.Referral program with attractive bonuses.
• International environment with opportunities for growth and mobility.
• Modern offices and excellent team culture.

About Capgemini

Capgemini is the business transformation partner for organizations seeking to accelerate their transition to a digital and sustainable world. Combining deep industry expertise with strengths in cloud, data, AI, engineering, and cybersecurity, Capgemini helps clients unlock innovation and create tangible business value. With a presence in more than 50 countries and a diverse global team, Capgemini continues to shape the future of technology and business transformation.