Vulnerability Management Consultant

Summary

Andersen is hiring a Vulnerability Management Consultant for a project strengthening cybersecurity, managing vulnerabilities, and protecting critical systems in an international environment.

The customer is a large international organization that relies on modern technology and digital solutions to support its operations. Its activities involve secure IT infrastructure, data management, digital services, and the adoption of emerging technologies to improve operational efficiency and reliability.

The project is focused on providing cybersecurity and digital services for international organizations within a complex multi-tenant environment. It includes cyber defense operations, security incident management, and continuous protection of critical systems and services to ensure secure and reliable operations worldwide.

Responsibilities

• Running and improving the end-to-end vulnerability management process: discovery, scanning, prioritization, remediation tracking and verification.
• Configuring and operating vulnerability scanning tools for infrastructure, cloud and web applications.
• Prioritizing vulnerabilities by risk, using CVSS, EPSS, exploitability, threat intelligence and asset criticality.
• Coordinating remediation with IT, application and infrastructure owners across multiple client organizations.
• Managing exceptions and risk acceptance, and track SLA compliance.
• Producing KPI/KRI reports and dashboards for technical and management audiences.
• Advising on patch management, hardening baselines (e.g. CIS Benchmarks) and attack surface reduction.

Requirements

• Experience in cybersecurity for 5+ years, including 3+ years in vulnerability management.
• Hands-on experience with at least one enterprise scanning platform (Tenable Nessus/Tenable.io/Tenable.sc, Qualys VMDR, Rapid7 InsightVM or Microsoft Defender Vulnerability Management).
• Risk-based prioritization (CVSS, EPSS, CISA KEV, asset criticality).
• Experience coordinating remediation across multiple teams and tracking SLAs.
• Knowledge of patch management for Windows, Linux and network devices, and of hardening standards (CIS).
• Clean record, ready for background verification.
• Level of English – from Upper-Intermediate and above.

Desired skills

• Cloud security posture management (e.g. Defender for Cloud, Wiz, Prisma Cloud).
• Web application and container scanning.
• Attack surface management tools.
• Knowledge of ISO 27001 or NIST CSF.
• Scripting (Python, PowerShell) for reporting automation and API integrations.
• Certifications: CISSP, CompTIA Security+ or CySA+, vendor certifications (Tenable, Qualys).

Reasons to join us

• Experience in teamwork with leaders in FinTech, Healthcare, Retail, Telecom, and others. Andersen cooperates with such businesses as Samsung, Siemens, Johnson & Johnson, BNP Paribas, Ryanair, Mercedes, TUI, Verivox, Allianz, T-Systems, etc..
• The opportunity to change the project and/or develop expertise in an interesting business domain.
• Guarantee of professional, financial, and career growth! The company has introduced systems of mentoring and adaptation for each new employee.
• The opportunity to earn up to an additional 1,000 EUR per month, depending on the level of expertise, which will be included in the annual bonus, by participating in the company's activities.
• Access to the corporate training portal, where the entire knowledge base of the company is collected and which is constantly updated.
• Bright corporate life (parties / pizza days / PlayStation / fruits / coffee / snacks / movies).
• Certification compensation (AWS, PMP, etc).
• Referral program.
• Private health insurance and sports compensation, depending on the type of employment.

Join us!

Локації

Austria, Belgium, Bulgaria, Croatia, Cyprus, Czech Republic, Denmark, Estonia, Finland, France, Germany, Hungary, Italy, Latvia, Lithuania, Luxembourg, Poland, Portugal, Romania, Slovakia, Slovenia, Spain, Sweden, The Netherlands