Vulnerability Risk Management Expert

• Work-life balance measures and flexible working hours
• Ongoing training and certifications.
• Hybrid remote work model.
• Attractive social benefits package
• Excellent dynamic and multidisciplinary work environment
• Volunteering programs

Telefónica Tech is the leading digital transformation company of the Telefónica Group. We offer a wide range of integrated technological services and solutions in Cybersecurity, Cloud, IoT, Big Data, Artificial Intelligence, and Blockchain, with which we support our clients in their digital transformation.

We are a group of over 6,200 brave people who work every day from different points around the world to achieve excellence, through leadership based on transparency and team spirit. If you identify with our pillars, we can't wait to meet you!

www.telefonicatech.com WHAT DO WE DO IN THE TEAM?

In the Offensive Security unit of Telefónica Cybersecurity & Cloud Tech, our goal is to provide organizations with an accurate and real security posture that allows us to offer our clients the discovery of critical vulnerabilities in their environment and help prioritize and address risks based on their exploitability and impact.

In our team, we are responsible for managing vulnerabilities in the systems, networks, and applications of organizations. What we do is identify, assess, and prioritize potential security threats and weaknesses to ensure that all digital assets are protected from possible risks. We use specialized tools and testing methods to detect vulnerabilities, then analyze their severity and work on their mitigation through patches, security configurations, and other preventive measures.

WHAT WILL YOUR DAY-TO-DAY BE LIKE?

Your mission will be to manage the vulnerability lifecycle.

Your day-to-day will be as follows

Onboarding and provisioning of assets in vulnerability management tools.

Analysis of continuously reported vulnerabilities in order to assess the real likelihood and impact to adjust criticality/severity, as well as the review and cleanup of false positives.

Support in defining prioritized remediation plans.

Generation of monthly reports and KPIs.

Review and improvement of scanning profiles.

Opening and managing client requests in the ticketing platform.

Service follow-up meetings.

Performing automations through scripts.

Identify opportunities for improvement to automate or optimize reports, dashboards, or data extraction.

AND FOR THIS, WE BELIEVE IT WOULD BE IDEAL IF YOU HAD...

To perform the role, the skills that would best fit the team and the project would be:

Passionate about technology and offensive security.

Creativity and a hacker mindset.

Proactivity and ability to take on challenges.

Ability to convey technically complex ideas to non-technical audiences.

Ability to work as part of a team.

Ability to translate technical data into clear charts and executive reports.

Self-sufficiency in solving everyday operational service problems.

Systematic identification of trends for the prevention and resolution of security failures.

Client relationship management based on assertiveness, empathy, and know-how.