Cybersecurity Analyst – Threat & Vulnerability Management

We are looking for a Cybersecurity Analyst to join the Threat & Vulnerability Management team. This role is suited to someone with experience in cybersecurity or IT security who wants to deepen their expertise in vulnerability management and work in a complex, enterprise-scale environment. You will collaborate with Cyber Threat Intelligence, infrastructure, and application teams to identify, assess, and remediate vulnerabilities across a diverse technology landscape, helping strengthen the organization’s security posture.

Key Responsibilities

• Vulnerability Scanning Support: Run vulnerability scans across endpoints, servers, networks, and cloud assets. Use scanning tools to identify potential vulnerabilities and ensure comprehensive coverage.
• Data Review and Analysis: Review and analyze vulnerability data to prioritize findings. Generate reports with actionable remediation recommendations.
• Remediation Tracking and Support: Track remediation efforts, follow up on mitigation progress, and support timely patch-cycle management.
• Vulnerability Management Platform Support: Support administration and optimization of the vulnerability management platform to enable accurate, scalable, and effective enterprise vulnerability tracking.
• Threat Intelligence Monitoring: Monitor threat-intelligence feeds for new vulnerabilities, assess their potential impact on organizational systems, and contribute to understanding emerging threats.
• Collaboration with Teams: Work with security, infrastructure, and development teams to validate findings and provide context on vulnerability risks.
• Stakeholder Communication: Help communicate vulnerability posture to IT and business stakeholders, translating technical information into understandable terms.
• Process Improvement: Maintain and improve internal tools and processes for tracking threats, exposures, and mitigation activities.
• Scripting and Automation: Develop scripts to streamline vulnerability scanning and reporting processes.
• Continuous Learning: Stay current on global threat trends, security advisories, and zero-day vulnerabilities. Pursue learning opportunities related to vulnerabilities, exploits, and security frameworks.
• Proactive Attitude: Demonstrate eagerness to learn and adopt cybersecurity best practices, contributing to a culture of security awareness.

Job Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or a related field, or equivalent practical experience.
• Experience using vulnerability scanning tools and platforms related to vulnerability management.
• Familiarity with MITRE ATT&CK, CVEs, CVSS scoring, patching processes, and attack vectors.
• Proficiency in scripting using Python, Bash, PowerShell, or equivalent; experience with API integration, automation, and security tools.
• Strong analytical and problem-solving skills with attention to detail.
• Strong written and verbal communication skills, including translating technical issues for non-technical audiences.
• Eagerness to learn and a proactive approach to cybersecurity best practices.

Nice to Have

• Enterprise endpoint security
• Security Orchestration, Automation and Response (SOAR)
• Network scanning
• Network security, including IPS/IDS
• Security protocols
• Operating systems: Windows, Unix, and Linux
• Log analysis and correlation

Benefits

• Enterprise-scale projects and access to leading IT partners and technologies from day one.
• Training and certification paths.
• Competitive starting salary and benefits program, including private health care, stock, savings plans, and sport cards.
• Regular salary increases and potential promotions based on results and performance.
• Opportunity to change roles every few years.
• Hybrid work model with the option to work from home two days per week and collaborate in the office.
• Employment is offered exclusively on an Umowa o Pracę (full-time employment contract).

Equal Opportunity

Equal opportunity employer that values diversity and does not discriminate on legally protected grounds.