Vulnerability Management Engineer (Bucharest)

Do you think you have what it takes for identifying, evaluating, treating and reporting on security vulnerabilities in IT enterprise landscapes? Do you want to be the go-to-person for all inquiries on vulnerability management aspects, making sure that this entire ecosystem is updated and protected from a security point of view? #LI-DNI

• As Vulnerability Management Engineer, you will work as part of Cegeka’s modern SOC. You will:
• Contribute to the delivery of Cegeka’s MSSP Vulnerability and Compliance Management service;
• Assist in the deployment of our Vulnerability and Compliance Management solution to customers;
• Work in close collaboration with customer teams to develop and implement remediation plans for identified vulnerabilities. Provide guidance on patching, configuration changes, and other mitigationstrategies to address the vulnerabilities effectively;
• Get involved in the daily operational management of our Vulnerability and Compliance platform, which is Tenable;
• Continuously monitor the evolving threat landscape and stay updated on the latest vulnerabilities, exploits, industry trends, advisories, and security bulletins to enhance the MSSP knowledge base and capabilities. Identify emerging threats and vulnerabilities that could impact clients' systems and networks.
• Conduct research on new vulnerabilities, exploit techniques, and mitigation strategies;
• Integrate external vulnerability intelligence feeds and sources into the MSSP vulnerability management service. Leverage threat intelligence to prioritize vulnerabilities and improve the accuracy of risk assessments.
• Participate in the development and enhancement of the MSSP vulnerability management service. Contribute to the creation of policies, procedures, and best practices related to vulnerability management;
• Develop and maintain vulnerability management metrics and key performance indicators (KPIs) to measure the effectiveness of the MSSP vulnerability management program. Generate regular reports for management and clients to demonstrate progress and identify areas for improvement.
• Assist the SOC Engineering team in automating processes related to Vulnerability and Compliance management, by scripting or through leveraging the existing toolset;
• Collaborate with your colleagues in Cegeka’s Modern SOC, providing advice to members of the CSIRT and Detection Engineering for the development of detection opportunities on emerging threats.

• You have minimum 1-2 years of experience in a similar role;
• Good knowledge of vulnerability management tooling (Tenable), scripting
• Languages(Python), network protocols (TCP/IP), JSON, (REST) API and relational
• database management system;
• Experience with Tenable Security Center or Tenable One is a plus;
• Strong written and verbal communication skills in English;
• You have a keen interest in cyber security;
• You are able to work in a team but also independently;
• You have a high sense of task ownership;
• You have analytical, technical and diagnostic skills;
• You are eager to learn.