Vulnerability Management Specialist

Decskill; Porto; Presencial; EUR 45 000 - 65 000; Tempo integral

Resumo da oferta

Decskill is expanding its cybersecurity team in Portugal and seeks a Vulnerability Management Specialist to strengthen our security program. You will work with multiple IT and security stakeholders across international teams to prioritize risks and drive remediation, ensuring assets are scanned and patched in a timely manner.

The role offers long-term projects with international exposure, a people-first culture, and opportunities to grow technically.

Qualificações

• Minimum 5 years of IT experience with hands-on vulnerability management or security.
• Strong understanding of vulnerability assessment, risk prioritization, and remediation.
• Experience with vulnerability scanning tools (Qualys, Nessus, Rapid7 InsightVM).
• Knowledge of patch management and vulnerability lifecycle management.
• Experience coordinating penetration testing and remediation.
• Understanding of secure code review and application security.
• Broad IT infrastructure knowledge (networks, servers, databases, apps).
• Familiarity with cybersecurity frameworks and risk management.
• Advanced Microsoft Excel for reports.
• Excellent communication and cross-border collaboration.
• Cybersecurity certifications (Security+, CEH, CISSP, GSEC) are a plus.
• Fluent written and spoken English.

Responsabilidades

• Manage and continuously improve Vulnerability Management program.
• Ensure assets are scanned and remediation tracked to completion.
• Monitor patch deployment and remediation across environments.
• Analyze scan results, prioritize risks, coordinate remediation.
• Identify systems affected by newly released vulnerabilities and communicate requirements.
• Coordinate and monitor penetration testing activities.
• Review findings and align with cybersecurity standards.
• Ensure regular secure code reviews and address vulnerabilities.
• Produce reports on vulnerability management and remediation progress.
• Collaborate with global cybersecurity teams and IT.

Conhecimentos

Vulnerability Mgmt

Cybersecurity

Patch management

Penetration testing

Secure code review

IT infrastructure

Excel (Advanced)

Stakeholder management

Communication

English fluency

Ferramentas

Qualys

Nessus

Rapid7 InsightVM

Descrição da oferta de emprego

We are growing. And we are looking for talented people.

At Decskill, we believe that technological excellence is driven by human talent.

We are an IT consulting company with more than 10 years of consolidated experience in the market, focused on building long-term relationships with both our clients and our people. Today, we are a community of over 800 professionals, working from Lisbon, Porto, and Madrid, contributing to impactful technology initiatives.

As part of the Astek Group, we combine a strong local culture with a global presence, being active in around 23 countries across 4 continents. This allows us to offer an international context, diverse challenges, and long-term career opportunities, while staying close to our teams.

We are looking for an Vulnerability Management Specialist!

Responsibilities:

• Manage and continuously improve the organization's Vulnerability Management program to strengthen the overall cybersecurity posture.
• Ensure all corporate assets are regularly scanned for vulnerabilities and that remediation activities are tracked through to completion.
• Monitor the deployment of critical security patches and ensure timely remediation across impacted environments.
• Analyze vulnerability scan results, prioritize risks, and coordinate remediation plans with internal IT and security teams.
• Identify systems affected by newly released critical vulnerabilities and communicate remediation requirements to relevant stakeholders.
• Coordinate and monitor penetration testing activities, including scheduling, execution, reporting, and remediation follow-up.
• Review penetration test findings, prioritize remediation actions, and ensure alignment with corporate cybersecurity standards.
• Ensure eligible applications and systems undergo regular secure code reviews and that identified vulnerabilities are addressed.
• Monitor the effectiveness and coverage of vulnerability scanning and code review tools.
• Produce regular and ad hoc reports on vulnerability management, patch compliance, and remediation progress.
• Collaborate with global Cybersecurity teams, IT departments, and business entities to improve security processes and compliance.
• Ensure Vulnerability Management activities align with Group cybersecurity policies, standards, and best practices.

Requirements:

• Minimum 5 years of experience in IT, with hands-on experience in Vulnerability Management, Cybersecurity, or Infrastructure Security.
• Strong understanding of vulnerability assessment, risk prioritization, and remediation processes.
• Experience with vulnerability scanning tools (e.g., Qualys, Tenable Nessus, Rapid7 InsightVM, or equivalent).
• Knowledge of patch management processes and vulnerability lifecycle management.
• Experience coordinating and reviewing penetration testing activities and remediation plans.
• Understanding of secure code review practices and application security concepts.
• Broad knowledge of IT infrastructure, including networks, operating systems, servers, databases, and enterprise applications.
• Familiarity with cybersecurity frameworks, security standards, and risk management practices.
• Strong analytical and problem-solving skills with the ability to prioritize remediation efforts based on business risk.
• Experience producing operational reports and dashboards using Microsoft Excel (advanced level).
• Excellent communication and stakeholder management skills, with experience working across international teams.
• Cybersecurity certifications (e.g., Security+, CEH, CISSP, GSEC) or equivalent experience are considered a strong advantage.
• Fluent written and spoken English.

Are you looking for an environment that values curiosity and commitment? Here, your contribution has real impact and individual growth is taken seriously.

Find with us the right opportunity to grow!

What you can expect from us

• Long-term projects with national and international context.
• Opportunities to grow technically and professionally.
• A people-first culture, focused on transparency and trust.
• Teams that value ownership, collaboration and stability.

Your next challenge might start here.

At Decskill, we are committed to equal opportunities and non-discrimination. We promote a culture of diversity and inclusion, where recruitment and career progression are based solely on talent, regardless of age, gender, ethnicity, race, nationality, or any other form of discrimination incompatible with human dignity.