Vulnerability Management Analyst (F/M/X)

Solvay; Lisboa; Hybrid; EUR 37,000 - 46,000; Full time

Benefits offered by this job

Cares program

Hybrid work

Career development

Language courses

Job summary

Solvay is seeking a Vulnerability Analyst to join the Security and Risk Management team within the Digital Technology department. You will identify security weaknesses across software, OS, and cloud platforms, and help drive remediation with stakeholders.

You will prioritize risks using CVSS, coordinate fixes, and monitor security posture with cloud-specific focus and reporting to leaders. A permanent contract with hybrid work is offered.

Qualifications

• Relevant education in Cybersecurity, computer science, or information technology.
• Experience in Vulnerability management or cybersecurity analysis.

Responsibilities

• Vulnerability detection & assessment across software, OS, and cloud environments.
• Risk prioritization based on CVSS scores and exploit intelligence.
• Remediation coordination to mitigate vulnerabilities.
• Continuous monitoring and reporting of vulnerability management efficacy.
• Provide actionable guidance to system owners on remediation strategies.
• Cloud Control Tower (CCT) monitoring and remediation of cloud-specific vulnerabilities.

Skills

Vulnerability assessment

CVSS scoring

Risk prioritization

Cloud security

VM tooling

Threat intelligence

Windows/Linux

Security reporting

Education

Cybersecurity degree

Tools

Qualys

Tanium

CrowdStrike

Windows Defender

SIEM

Job description

Solvay is all about chemistry. We're not just referring to chemical reactions here, but also to the magic that occurs when the brightest minds get to work together. This is where our true strength lies. In you. In your future colleagues and in all your differences. And of course, in your ideas to improve lives while preserving our planet's beauty for the generations to come.

About The Role

Our Security and risk management team, composed of 20 people, is integrated in the Digital technology department. As a Vulnerability Analyst, your main goal will be to find and help fix security weaknesses in our systems. This includes everything from software and operating system flaws to mistakes in how our platforms are set up, even in the cloud.

You will be accountable for:

• Vulnerability Detection & Assessment: Proactively identify and evaluate security weaknesses.
• Risk Prioritization: Accurately prioritize identified vulnerabilities based on their potential impact and exploitability. This requires a strong understanding of CVSS (Common Vulnerability Scoring System) scores and exploit intelligence.
• Remediation Support & Coordination: Facilitate the efficient mitigation of vulnerabilities.
• Continuous Monitoring & Reporting: Ensure end-to-end oversight and clear communication of vulnerability management efficacy
• Stakeholder Guidance: Provide actionable guidance to system owners on effective remediation strategies.
• Cloud Control Tower (CCT): Monitor and enhance cloud security posture by identifying and remediating cloud-specific vulnerabilities and misconfigurations.

We offer a permanent contract based on hybrid working mode.

About You

Relevant education degree or equivalent in Cybersecurity, computer science, information technology. Relevant work experience in Vulnerability management or cybersecurity analysis.

Competencies:

• Deep understanding of vulnerability classes: Proficient in identifying and analyzing software bugs, OS flaws, and critical misconfigurations across diverse environments, including on-premises infrastructure and hyperscale cloud platforms (AWS, Azure, GCP).
• Proficiency with VM tooling: Hands-on experience with enterprise-grade vulnerability scanners and security posture management platforms (e.g., Qualys, Tanium, Crowdstrike, Windows Defender).
• Threat & Risk Assessment: Demonstrated ability to assess technical risk, interpret CVSS scores, leverage threat intelligence, and understand exploit methodologies to prioritize vulnerabilities effectively.
• Operating Systems & Network Protocols: Strong grasp of Windows and Linux, as well as TCP/IP, common network services, and security controls (e.g., firewalls, IDS/IPS).
• Reporting & Analytics: Experience in developing clear, concise, and actionable reports for technical and executive audiences, potentially leveraging SIEM or dedicated reporting tools.

Behaviors:

• Strong attention to detail to ensure thorough identification and analysis of vulnerabilities.
• Ability to articulate complex technical issues and risks clearly and concisely, both verbally and in written form, to diverse stakeholders, from technical teams to senior leadership.
• Proactive in identifying and addressing security weaknesses to prevent potential breaches.

About The Pay

Attractive and equitable pay for all: compensation is determined within a range to foster your development in the role. The base pay expected for this role is € 36 800 - € 46 000 per year in Portugal

Your salary may ultimately be higher or lower based on your skills and experience. Additionally, we provide a competitive total rewards package that includes a bonus and/or other incentives.

Benefits:

• Solvay Cares program: minimum of 16 weeks of parenting leave for all employees and package with healthcare, disability and life insurance coverage.
• Prioritization of well-being: work-life balance promotion, flexible approach to work part-time or hybrid work arrangements (depending on the type of job), employee assistance program with access to physical and psychological support.
• Professional development: prioritization of internal talents for career progression, access to a training platform, opportunities to join Employee Resource Groups (ERG) for experience sharing and mentorship and free language courses.

About Us

Solvay, a pioneering chemical company with a legacy rooted in founder Ernest Solvay's pivotal innovations in the soda ash process, is dedicated to delivering essential solutions globally through its workforce of over 9,000 employees. Since 1863, Solvay harnesses the power of chemistry to create innovative, sustainable solutions that answer the world's most essential needs such as purifying the air we breathe and the water we drink, preserving our food supplies, protecting our health and well-being, creating eco-friendly clothing, making the tires of our cars more sustainable and cleaning and protecting our homes.

We value the diversity that individuals bring and we invite you to consider a future with us, regardless of background, age, gender, national origin, ethnicity, religion, sexual orientation, ability or identity. We encourage individuals who may require any assistance or accommodations to let us know to ensure a seamless application experience. We are here to support you throughout the application journey and want to ensure all candidates are treated equally. If you are unsure whether you meet all the criteria or qualifications listed in the job description, we still encourage you to apply.