Vulnerability Risk Management Expert

• Minimum of 2-3 years of experience in vulnerability lifecycle management projects.
• Experience in automation (Python, PowerShell, APIs).
• Experience with ticketing platforms such as Jira or ServiceNow.
• Experience in presenting dashboards (Power BI).
• Programming and scripting languages in Python, Bash, PowerShell, etc.
• Knowledge of interpreting scan results, risk levels, and proposing vulnerability remediation recommendations.
• Basic knowledge of secure development and main security risks in applications.
• Familiarity with cloud security and basic protection concepts in AWS, Azure, or similar environments.
• Knowledge of hardening, secure configuration, and security best practices.
• Ability to perform technical security analyses and review implemented controls.

To perform this role, the skills that would fit well with the team and the project are:

• Passionate about technology and offensive security.
• Creativity and a hacker mindset.
• Proactivity and ability to take on challenges.
• Ability to convey technically complex ideas to non-technical audiences.
• Ability to work as part of a team.
• Leadership.

• University education, Higher Level Vocational Training degree, or equivalent professional experience.
• Desirable:
  • Holding certifications related to the manufacturer Tenable.
  • Holding certifications related to cybersecurity, cloud security, and networks.
  • Holding ISO 27001

• Required:
  • Native Spanish.
  • Intermediate English

• Work-life balance measures and flexible hours.
• Continuous training and certifications.
• Hybrid remote work model.
• Attractive social benefits package.
• Excellent dynamic and multidisciplinary work environment.
• Volunteering programs.

#WeAreDiverse #WePromoteEquality
We are convinced that diverse and inclusive teams are more innovative, transformative, and achieve better results.
Therefore, we promote and guarantee the inclusion of all people regardless of gender, age, sexual orientation and identity, culture, disability, or any other condition

We want to meet you! 😊

In the Offensive Security unit of Telefónica Tech, our goal is to provide organizations with an accurate and real security posture that allows us to help our clients discover critical vulnerabilities in their environment and prioritize and address risks based on their exploitability and impact.

In our team, we are responsible for managing vulnerabilities in the systems, networks, and applications of organizations. What we do is identify, assess, and prioritize potential security threats and weaknesses to ensure that all digital assets are protected from possible risks. We use specialized tools and testing methods to detect vulnerabilities, then analyze their severity and work on their mitigation through patches, security configurations, and other preventive measures.

The main functions are participation in the activities of the Security Technical Office, providing support in cybersecurity consulting, technical analysis, risk management, self-assessments, audit support, management and updating of documentation, review of security controls, vulnerability management, and technical inquiries. You may also collaborate on tasks related to cloud security, secure development, and incident management and response.

Your day-to-day will be as follows:

• Analysis of continuously reported vulnerabilities in order to assess the real likelihood and impact to adjust criticality/severity, as well as the review and cleanup of false positives.
• Support in defining prioritized remediation plans.
• Generation of monthly reports and KPIs.
• Opening and managing client requests in the ticketing platform.
• Service follow-up meetings.
• Support in the technical management of teams.
• Performing automations through scripts.
• Ability to design and integrate solutions within the vulnerability lifecycle.
• Identify automation opportunities in the vulnerability management lifecycle using scripts or orchestration platforms.
• Analyze technical documentation, identify risks, and convey conclusions clearly.

AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...