Vulnerability Manager - Retail Cyber Resilience Lead

Devoteam; Porto; Presencial; EUR 60 000 - 90 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Professional development

Growth opportunities

Collaborative culture

Resumo da oferta

Devoteam Cyber Trust in Porto, Portugal, is seeking a Vulnerability Manager to join the Threat Operations team within the Retail & E-commerce sector.

You will own the vulnerability lifecycle across infrastructure and endpoints, define remediation SLAs, monitor progress, and produce dashboards and KPIs for management. Collaboration with AppSec, Cloud Security, and Infra teams is expected.

Candidates should have solid knowledge of CVE/CVSS, SSDLC, and experience in prioritization and reporting.

Qualificações

• Fundamental knowledge of Vulnerability Management concepts (CVE, CVSS, KEV).
• Experience defining SLAs and tracking remediation activities.
• Knowledge of End-of-Life / End-of-Support risk assessment.
• Ability to create dashboards and interpret KPIs.
• Familiarity with SSDLC, SCA/SAST concepts.

Responsabilidades

• Manage the vulnerability lifecycle across infrastructure and endpoints.
• Prioritize issues using CVE, CVSS, KEV and business context.
• Define remediation SLAs and monitor progress.
• Validate remediation or mitigation, escalate SLA breaches.
• Monitor vulnerabilities in development pipelines with AppSec.
• Assess risk of technology obsolescence across systems.
• Analyze security findings in cloud, containers, and images with AppSec and Cloud Security teams.
• Validate security tool results, investigate false positives.
• Produce dashboards, KPIs and weekly status updates for management.
• Automate and document procedures within the Vulnerability Management Program.

Conhecimentos

Vulnerability Management

SLA Definition

Dashboard & KPIs

Cloud Security

SSDLC

Ferramentas

Tenable One

CrowdStrike FEM

Azure

Google Cloud

SCA/SAST

Descrição da oferta de emprego

Devoteam Cyber Trust in Porto, Portugal, is seeking a Vulnerability Manager to join the Threat Operations team within the Retail & E-commerce sector.

You will own the vulnerability lifecycle across infrastructure and endpoints, define remediation SLAs, monitor progress, and produce dashboards and KPIs for management. Collaboration with AppSec, Cloud Security, and Infra teams is expected.

Candidates should have solid knowledge of CVE/CVSS, SSDLC, and experience in prioritization and reporting.