Vulnerability Management Specialist

Decskill; Porto; On-site; EUR 40,000 - 65,000; Full time

Job summary

Decskill, an Astek Group member, seeks a Vulnerability Management Specialist to strengthen cybersecurity across our IT landscape in Portugal. You will own the vulnerability management program, ensure regular scans, and coordinate remediation with IT and security teams.

You will analyze scan results, prioritize risks, oversee patch deployment, and contribute to secure code reviews and risk management. Fluent English required.

Qualifications

• Minimum 5 years of experience in IT with hands-on Vulnerability Management, Cybersecurity, or Infrastructure Security.
• Strong understanding of vulnerability assessment, risk prioritization, and remediation processes.
• Experience with vulnerability scanning tools (Qualys, Nessus, Rapid7 InsightVM) or equivalent.
• Knowledge of patch management processes and vulnerability lifecycle management.
• Experience coordinating penetration testing activities and remediation plans.
• Understanding of secure code review practices and application security concepts.
• Broad knowledge of IT infrastructure and enterprise applications.
• Familiarity with cybersecurity frameworks and risk management practices.
• Excellent communication and stakeholder management skills across international teams.
• Cybersecurity certifications (Security+, CEH, CISSP, GSEC) or equivalent are a strong advantage.
• Fluent written and spoken English.

Responsibilities

• Manage and continuously improve the Vulnerability Management program.
• Ensure assets are scanned for vulnerabilities and remediation tracked to completion.
• Monitor deployment of critical security patches and remediation across environments.
• Prioritize risks from scan results and coordinate remediation with IT and security teams.
• Identify systems affected by newly released vulnerabilities and communicate requirements.
• Coordinate and monitor penetration testing activities, reporting, and remediation follow-up.
• Review penetration test findings and align remediation with cybersecurity standards.
• Ensure regular secure code reviews for eligible applications and systems.
• Produce reports on vulnerability management, patch compliance, and remediation progress.
• Collaborate with global cybersecurity teams and business units to improve security processes.

Skills

Vulnerability Management

Cybersecurity

Patch management

Penetration testing

Secure code review

Excel (advanced)

English proficiency

Tools

Qualys

Tenable Nessus

Rapid7 InsightVM

Job description

We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent.

We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We are looking for an Vulnerability Management Specialist!

Responsibilities:

• Manage and continuously improve the organization's Vulnerability Management program to strengthen the overall cybersecurity posture.
• Ensure all corporate assets are regularly scanned for vulnerabilities and that remediation activities are tracked through to completion.
• Monitor the deployment of critical security patches and ensure timely remediation across impacted environments.
• Analyze vulnerability scan results, prioritize risks, and coordinate remediation plans with internal IT and security teams.
• Identify systems affected by newly released critical vulnerabilities and communicate remediation requirements to relevant stakeholders.
• Coordinate and monitor penetration testing activities, including scheduling, execution, reporting, and remediation follow‑up.
• Review penetration test findings, prioritize remediation actions, and ensure alignment with corporate cybersecurity standards.
• Ensure eligible applications and systems undergo regular secure code reviews and that identified vulnerabilities are addressed.
• Monitor the effectiveness and coverage of vulnerability scanning and code review tools.
• Produce regular and ad hoc reports on vulnerability management, patch compliance, and remediation progress.
• Collaborate with global Cybersecurity teams, IT departments, and business entities to improve security processes and compliance.
• Ensure Vulnerability Management activities align with Group cybersecurity policies, standards, and best practices.

Requirements:

• Minimum 5 years of experience in IT, with hands‑on experience in Vulnerability Management, Cybersecurity, or Infrastructure Security.
• Strong understanding of vulnerability assessment, risk prioritization, and remediation processes.
• Experience with vulnerability scanning tools (e.g., Qualys, Tenable Nessus, Rapid7 InsightVM, or equivalent).
• Knowledge of patch management processes and vulnerability lifecycle management.
• Experience coordinating and reviewing penetration testing activities and remediation plans.
• Understanding of secure code review practices and application security concepts.
• Broad knowledge of IT infrastructure, including networks, operating systems, servers, databases, and enterprise applications.
• Familiarity with cybersecurity frameworks, security standards, and risk management practices.
• Strong analytical and problem‑solving skills with the ability to prioritize remediation efforts based on business risk.
• Experience producing operational reports and dashboards using Microsoft Excel (advanced level).
• Excellent communication and stakeholder management skills, with experience working across international teams.
• Cybersecurity certifications (e.g., Security+, CEH, CISSP, GSEC) or equivalent experience are considered a strong advantage.
• Fluent written and spoken English.

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously.

Find with us the right opportunity to grow!

What you can expect from us

• Long‑term projects with national and international context.
• Opportunities to grow technically and professionally.
• A people‑first culture, focused on transparency and trust.
• Teams that value ownership, collaboration and stability.

Your next challenge might start here.

At Decskill, we are committed to equal opportunities and non‑discrimination. We promote a culture of diversity and inclusion, where recruitment and career progression are based solely on talent, regardless of age, gender, ethnicity, race, nationality, or any other form of discrimination incompatible with human dignity.