Vulnerability Management Analyst (F/M/X)

Solvay; Lisboa; Hybrid; EUR 37,000 - 46,000; Full time

Benefits offered by this job

Solvay Cares program

16 weeks parenting leave

Healthcare coverage

Disability & life insurance

Flexible work arrangements

Hybrid work

Employee assistance program

Language courses

Training platform

Career progression

Job summary

Solvay Group in Lisbon is seeking a Vulnerability Analyst to identify and remediate security weaknesses across systems, including on-prem and cloud environments. You will assess risks using CVSS, coordinate remediation, and monitor security posture with relevant tools.

This is a permanent hybrid role within our Security and Risk Management team. You will work with enterprise scanners and cloud security platforms, communicating findings clearly to technical and leadership audiences.

Qualifications

• Degree in Cybersecurity, Computer Science or IT-related field.
• Experience in vulnerability management or cybersecurity analysis.
• Strong understanding of CVSS and risk prioritization.
• Experience with enterprise vulnerability scanners and security posture tools.
• Proficiency with Windows and Linux.

Responsibilities

• Vulnerability Detection & Assessment: identify and evaluate security weaknesses.
• Risk Prioritization: rank identified vulnerabilities by impact and exploitability.
• Remediation Support & Coordination: facilitate remediation efforts.
• Continuous Monitoring & Reporting: ensure end-to-end oversight of vulnerability management.
• Stakeholder Guidance: provide actionable remediation guidance to system owners.
• Cloud Control Tower: monitor and remediate cloud-specific vulnerabilities and misconfigurations.

Skills

Vulnerability assessment

CVSS scores

Threat intelligence

Windows OS

Linux OS

Cloud security

Vulnerability scanners

SIEM reporting

TCP/IP

Firewall & IDS/IPS

Education

Bachelor's degree in Cybersecurity or related field

Tools

Qualys

Tanium

CrowdStrike

Windows Defender

Job description

Solvay is all about chemistry. We’re not just referring to chemical reactions here, but also to the magic that occurs when the brightest minds get to work together. This is where our true strength lies. In you. In your future colleagues and in all your differences. And of course, in your ideas to improve lives while preserving our planet’s beauty for the generations to come.About the roleOur Security and risk management team, composed of 20 people, is integrated in the Digital technology department. As a Vulnerability Analyst, your main goal will be to find and help fix security weaknesses in our systems. This includes everything from software and operating system flaws to mistakes in how our platforms are set up, even in the cloud.You will be accountable for:Vulnerability Detection & Assessment: Proactively identify and evaluate security weaknesses.Risk Prioritization: Accurately prioritize identified vulnerabilities based on their potential impact and exploitability. This requires a strong understanding of CVSS (Common Vulnerability Scoring System) scores and exploit intelligence.Remediation Support & Coordination: Facilitate the efficient mitigation of vulnerabilities.Continuous Monitoring & Reporting: Ensure end-to-end oversight and clear communication of vulnerability management efficacyStakeholder Guidance: Provide actionable guidance to system owners on effective remediation strategies.Cloud Control Tower (CCT): Monitor and enhance cloud security posture by identifying and remediating cloud-specific vulnerabilities and misconfigurations.We offer a permanent contract based on hybrid working mode.About youRelevant education degree or equivalent in Cybersecurity, computer science, information technology. Relevant work experience in Vulnerability management or cybersecurity analysis.Competencies:Deep understanding of vulnerability classes: Proficient in identifying and analyzing software bugs, OS flaws, and critical misconfigurations across diverse environments, including on-premises infrastructure and hyperscale cloud platforms (AWS, Azure, GCP).Proficiency with VM tooling: Hands-on experience with enterprise-grade vulnerability scanners and security posture management platforms (e.g., Qualys, Tanium, Crowdstrike, Windows Defender).Threat & Risk Assessment: Demonstrated ability to assess technical risk, interpret CVSS scores, leverage threat intelligence, and understand exploit methodologies to prioritize vulnerabilities effectively.Operating Systems & Network Protocols: Strong grasp of Windows and Linux, as well as TCP/IP, common network services, and security controls (e.g., firewalls, IDS/IPS).Reporting & Analytics: Experience in developing clear, concise, and actionable reports for technical and executive audiences, potentially leveraging SIEM or dedicated reporting tools.Behaviors:Strong attention to detail to ensure thorough identification and analysis of vulnerabilities.Ability to articulate complex technical issues and risks clearly and concisely, both verbally and in written form, to diverse stakeholders, from technical teams to senior leadership.Proactive in identifying and addressing security weaknesses to prevent potential breaches.About the payAttractive and equitable pay for all: compensation is determined within a range to foster your development in the role. The base pay expected for this role is € 36 800 - € 46 000 per year in PortugalYour salary may ultimately be higher or lower based on your skills and experience. Additionally, we provide a competitive total rewards package that includes a bonus and/or other incentives.Benefits:Solvay Cares program: minimum of 16 weeks of parenting leave for all employees and package with healthcare, disability and life insurance coverage.Prioritization of well-being: work-life balance promotion, flexible approach to work part-time or hybrid work arrangements (depending on the type of job), employee assistance program with access to physical and psychological support.Professional development: prioritization of internal talents for career progression, access to a training platform, opportunities to join Employee Resource Groups (ERG) for experience sharing and mentorship and free language courses.About usSolvay, a pioneering chemical company with a legacy rooted in founder Ernest Solvay's pivotal innovations in the soda ash process, is dedicated to delivering essential solutions globally through its workforce of over 9,000 employees. Since 1863, Solvay harnesses the power of chemistry to create innovative, sustainable solutions that answer the world’s most essential needs such as purifying the air we breathe and the water we drink, preserving our food supplies, protecting our health and well-being, creating eco-friendly clothing, making the tires of our cars more sustainable and cleaning and protecting our homes.We value the diversity that individuals bring and we invite you to consider a future with us, regardless of background, age, gender, national origin, ethnicity, religion, sexual orientation, ability or identity. We encourage individuals who may require any assistance or accommodations to let us know to ensure a seamless application experience. We are here to support you throughout the application journey and want to ensure all candidates are treated equally. If you are unsure whether you meet all the criteria or qualifications listed in the job description, we still encourage you to apply.#LI-MA1 #Senior #LI-Hybrid