Vulnerability Management Senior Specialist (Cybersecurity)

Quick Facts

• Hybrid role based in Krakow (up to 4 remote days per week)
• English required

Description

As a Vulnerability Management Senior Specialist (Cybersecurity), you will lead vulnerability assessments for critical and high-severity findings, validate impact with technical evidence, and guide remediation across enterprise environments. You will coordinate with infrastructure, platform, and application teams, track progress, and verify effectiveness through re-scans and validation testing. You will produce technical reports covering root cause, attack vectors, and business impact for both technical teams and governance bodies.

Responsibilities

• Review critical/high-severity vulnerabilities using sources such as NIST/NVD and vendor advisories to determine impact and inform stakeholders
• Validate vulnerability findings with technical evidence to confirm true/false positives and refine affected asset lists
• Map vulnerabilities to assets and coordinate with service owners for accurate impact assessment
• Recommend remediation strategies (patches, upgrades, configuration hardening, and controls) with risks and dependencies
• Create comprehensive technical reports including root cause, attack vectors, business impact, and remediation steps
• Collaborate with infrastructure, platform, and application teams to plan, execute, and support remediation
• Track remediation progress, update statuses, and escalate delays or risks
• Verify remediation effectiveness through re-scans and validation testing; document residual risks
• Support regulatory, internal, and external audit interactions and compliance documentation
• Handle ad hoc operational support, escalation management, and cross-team collaboration

Requirements

• At least 5 years of experience in IT Security or a comparable role
• Proven expertise assessing critical/high-severity vulnerabilities from NIST/NVD and vendor advisories, translating findings into business impact
• Strong understanding of common vulnerability types and attack techniques (e.g., RCE, privilege escalation, authentication bypass)
• Hands-on experience with vulnerability detection tools including Tenable, SAST, and DAST
• Knowledge of CI/CD pipeline integration of security testing and remediation
• Solid technical foundation across networking and application delivery environments (e.g., WAFs, TLS, load balancers, cloud/on-prem architectures)
• Practical remediation experience (patching, upgrades, configuration hardening, and controls)
• Excellent stakeholder management skills
• Advanced written communication skills
• Experience working in cybersecurity operations, risk management, and governance in large/enterprise organizations
• Organized, delivery-focused, proactive approach
• Ability to work remotely with a minimum of 6 days per month in the office
• Fluent English (spoken and written)
• EU work authorization

Benefits

• Hybrid work model (up to 4 remote days per week)
• Opportunity to shape enterprise vulnerability management and strengthen security posture
• Collaboration with cross-functional infrastructure, platform, and application teams