Vulnerability Operations Lead: Cyber Resilience

Devoteam | Cyber Trust; Porto; Presencial; EUR 42 000 - 70 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Career development

Diversity & inclusion

Open to disabilities

Resumo da oferta

Devoteam Cyber Trust is seeking a Vulnerability Management Specialist to join our Threat Operations team. You will lead the vulnerability lifecycle across infrastructure and endpoints, prioritizing findings by CVE, CVSS, and business impact.

You will define remediation SLAs, monitor progress, and coordinate with AppSec, Cloud Security, and development teams to reduce risk. Strong analytical skills and clear communication are essential.

Qualificações

• Fundamental knowledge of Vulnerability Management concepts (CVE, CVSS, KEV) and remediation.
• Experience defining SLAs, monitoring remediation activities, conducting follow-ups, and escalating issues.
• Knowledge of technology obsolescence (EOL/EOS) and associated risk assessment.
• Experience creating dashboards and reports, with the ability to define and interpret KPIs.
• Knowledge of cloud security and cloud resources, including security findings analysis.
• Knowledge of container and container image vulnerabilities.
• Familiarity with the SSDLC and SCA/SAST concepts.
• Critical approach to security tool results, validating findings rather than accepting them at face value.

Responsabilidades

• Manage the vulnerability lifecycle across infrastructure and endpoints, including analysis, prioritization (CVE, CVSS, KEV, exploitability, business context), and remediation SLAs.
• Monitor and validate remediation or mitigation processes, identify SLA breaches, and elevate issues as needed.
• Identify and monitor vulnerabilities within development pipelines (SSDLC), in coordination with AppSec.
• Assess risk from technology obsolescence (EOL/EOS) across systems and components.
• Identify and analyze security findings across cloud environments, containers, and images with AppSec and Cloud Security teams.
• Critically validate security tool results, investigate false positives, and confirm true vulnerabilities.
• Ensure coverage of the vulnerability management platform across the asset estate in coordination with Infrastructure.
• Produce vulnerability dashboards, KPIs, and weekly status updates for management.
• Automate, document, and standardize operational procedures within the Vulnerability Management Program.

Conhecimentos

Vulnerability Management

SLAs & remediation

KPI dashboards

Cloud security

SSDLC / SCA/SAST

Container security

Windows & Linux

Networking basics

Communication

Prioritization

Ferramentas

Tenable One

CrowdStrike FEM

Azure

Google Cloud

SCA/SAST tools

IaC scanning tools

Descrição da oferta de emprego

Devoteam Cyber Trust is seeking a Vulnerability Management Specialist to join our Threat Operations team. You will lead the vulnerability lifecycle across infrastructure and endpoints, prioritizing findings by CVE, CVSS, and business impact.

You will define remediation SLAs, monitor progress, and coordinate with AppSec, Cloud Security, and development teams to reduce risk. Strong analytical skills and clear communication are essential.