Vulnerability Analyst

Capgemini; Lisboa; Hybrid; EUR 42,000 - 66,000; Full time

Benefits offered by this job

Hybrid work model

Health and life insurance

Referral bonuses

International environment and mobility

Modern offices

Job summary

Capgemini is seeking a Cybersecurity Analyst to join our cybersecurity team focused on vulnerability management, security monitoring, and continuous improvement of clients' security posture. You will analyze and remediate vulnerabilities, monitor events, and communicate risks to stakeholders in a hybrid working environment.

The role emphasizes collaboration with infrastructure, cloud, and application teams, alongside governance activities and security metrics reporting.

Qualifications

• Experience in Vulnerability Management and/or Vulnerability Assessment activities.
• Experience with security platforms such as Qualys, BitSight, and CrowdStrike.
• Knowledge of Windows, Linux, and IP networking environments.
• Experience with Cloud environments (AWS, Azure, and/or GCP).
• Understanding of CIS, NIST, ISO 27000, and OWASP.

Responsibilities

• Performing analysis and follow-up of security vulnerabilities across systems, infrastructures, and applications.
• Monitoring, analyzing, and handling security events and findings.
• Managing the lifecycle of identified vulnerabilities, from detection through remediation and closure.
• Communicating risks and security findings to technical and business stakeholders.
• Producing reports and metrics on vulnerability exposure, remediation status, and overall security posture.

Skills

Vulnerability Management

Security Operations

Security Analysis

Communication Skills

Analytical Skills

Team Collaboration

Tools

Qualys

BitSight

CrowdStrike

Check Point

Fortinet

PowerShell

Shell Script

Cisco Firewalls

Job description

YOUR ROLEJoining Capgemini Engineering as a Cybersecurity Analyst , you will become part of a cybersecurity team focused on Vulnerability Management , Security Monitoring , and continuous improvement of our clients' security posture.In this role you will play a key role in:Performing analysis and follow-up of security vulnerabilities across systems, infrastructures, and applications.Monitoring, analyzing, and handling security events and findings.Managing the lifecycle of identified vulnerabilities, from detection through remediation and closure.Communicating risks and security findings to technical and business stakeholders.Performing security and compliance assessments aligned with industry standards and best practices.Working closely with infrastructure, cloud, and application teams to ensure timely remediation of identified vulnerabilities.Supporting security governance activities and contributing to continuous improvement of vulnerability management processes.Producing reports and metrics on vulnerability exposure, remediation status, and overall security posture.YOUR PROFILEWe are looking for a cybersecurity professional with strong analytical skills and hands-on experience in vulnerability management and security operations.Experience in Vulnerability Management and/or Vulnerability Assessment activities.Experience working as a Cybersecurity Analyst , Vulnerability Analyst , Security Analyst , or SOC Analyst , with proven involvement in vulnerability analysis, remediation tracking, and security monitoring.Experience with security platforms such as Qualys , BitSight , and/or CrowdStrike .Solid knowledge of Windows , Linux , and IP networking environments.Experience working with Cloud environments (AWS, Azure, and/or GCP).Knowledge of Containers and containerized environments.Understanding of information security and compliance frameworks, including CIS , NIST , ISO 27000 , and OWASP .Ability to collaborate effectively with technical teams and stakeholders to drive remediation activities.Strong analytical, organizational, and communication skills.Mandatory SkillsKnowledge of network security technologies and services across Microsoft , Linux , and Container environments.Cloud security knowledge in AWS , Azure , and GCP .Experience with firewall technologies, namely Check Point , Fortinet , and Cisco .Knowledge of security frameworks and auditing standards, including CIS , NIST , ISO 27K , and OWASP .Nice to HaveExperience in Security Operations Centre (SOC) environments.Hands-on experience with security monitoring and incident analysis.Scripting and automation skills using PowerShell and/or Shell Script .Relevant cybersecurity certifications (Security+, CySA+, SC-200, Qualys certifications or similar).WHAT YOU'LL LOVE ABOUT WORKING HEREJoin a multicultural and collaborative environment.Work on challenging cybersecurity projects across multiple industries.Access continuous learning opportunities, certification programs, and career development plans.Hybrid and flexible work model.Health and life insurance.Referral program with attractive bonuses.International environment with opportunities for growth and mobility.Modern offices and excellent team culture.About CapgeminiCapgemini is the business transformation partner for organizations seeking to accelerate their transition to a digital and sustainable world. Combining deep industry expertise with strengths in cloud, data, AI, engineering, and cybersecurity, Capgemini helps clients unlock innovation and create tangible business value. With a presence in more than 50 countries and a diverse global team, Capgemini continues to shape the future of technology and business transformation.