Vulnerability & Exposure Management Specialist (Mid/Senior)

Quality & Reliability S.A. (QnR); Ohio; On-site; USD 110,000 - 160,000; Full time

Job summary

SysteCom, a member of QnR Group, seeks a Vulnerability & Exposure Management Specialist to help organizations continuously discover, assess, prioritise and reduce vulnerabilities and security exposures across their technology estate.

Join SysteCom as part of the QnR Group and help build and protect secure digital operations through risk-based remediation, governance metrics and executive reporting.

Qualifications

• Experience operating vulnerability-scanning, exposure-management or remediation-tracking capabilities.
• Knowledge of CVE, CVSS and risk-based prioritisation.
• Ability to translate technical exposure into remediation actions.

Responsibilities

• Operate vulnerability and exposure-management platforms.
• Validate findings and prioritise remediation with business context.
• Coordinate remediation with infrastructure, applications, and cloud owners.
• Track exceptions, risk acceptance and SLAs.
• Produce reporting on exposure trends and progress.

Skills

Vulnerability scanning

Exposure management

Attack surface

Remediation tracking

CVE/CVSS knowledge

Risk-based prioritisation

Governance metrics

Dashboards

Cloud posture

Tools

Tenable

Qualys

Rapid7

Job description

Are you a Vulnerability & Exposure Management Specialist? Think bigger about your next move!

Build your future with QnR Group.
JOIN THE NEXT EUROPEAN TECHNOLOGY POWERHOUSE

Vulnerability & Exposure Management Specialist | SysteCom, member of QnR Group

Role overview

We are looking for a Vulnerability & Exposure Management Specialist to help organisations continuously discover, assess, prioritise and reduce vulnerabilities and security exposures across their technology estate.

About QnR Group

QnR Groupis a technology group with 35 years of experience, 8 companies, 4 delivery centers and 210+ professionals across Greece, Belgium, Cyprus and Poland. Listed on the Athens Stock Exchange since 2000, we deliver mission-critical digital transformation projects for the public and private sector. The Group’s capabilities coverssoftware engineering, enterprise and generative AI, cybersecurity, cloud infrastructure, SAP and ServiceNow solutions, core banking and maritime intelligence.

About SysteCom

SysteCom, a member of QnR Group, specializes in cybersecurity, digital resilience and IT infrastructure. The company delivers solutions and services that help organizations protect their systems and data, strengthen operational continuity and modernize their technology environments. Bringing together security and infrastructure expertise, SysteCom supports businesses across sectors in building secure, reliable and resilient digital operations.

What you'll work on:

• Operate vulnerability and exposure-management platforms
• Validate findings and prioritise remediation using technical and business context
• Coordinate remediation with infrastructure, application and cloud owners
• Track exceptions, risk acceptance, service levels and recurring weaknesses
• Produce operational and executive reporting on exposure trends and progress

What you bring:

• Experience operating vulnerability-scanning, exposure-management, attack-surface or remediation-tracking capabilities
• Knowledge of CVE, CVSS, EPSS, exploitability, asset criticality, compensating controls and risk-based prioritisation
• Ability to validate findings, identify false positives and translate technical exposure into remediation actions
• Experience coordinating remediation with infrastructure, application, network and cloud owners
• Understanding of authenticated scanning, asset coverage, exception management, service levels and risk acceptance
• Strong analytical and reporting skills, including operational dashboards and management-level summaries
• Familiarity with cloud posture, external attack surface and vulnerability intelligence sources
• For senior candidates, experience defining governance, metrics, tooling strategy and continuous-improvement processes

Required certifications:

Mid-level and Senior: at least one relevant certification, such as CompTIA CySA+, CISSP, GIAC GSEC or a recognised Tenable, Qualys, Rapid7 or exposure-management vendor certification

Nice to have:

• Tenable, Qualys, Rapid7 or exposure-management platform experience
• Cloud-security posture or attack-surface management experience