Vulnerability Management Specialist

About the role

Consultec is seeking a Vulnerability Management Specialist to lead the identification, analysis, prioritization, and remediation of security vulnerabilities across its technology landscape. The role is central to the preventive cybersecurity cycle, helping the organization reduce its attack surface and maintain compliance with industry standards.

Key responsibilities

• Conduct regular vulnerability scans of infrastructure, applications, and endpoints using tools such as Nessus, Qualys, or OpenVAS.
• Analyze, validate, and prioritize findings based on CVSS scores, impact, and exposure.
• Manage the full vulnerability lifecycle: identification, analysis, remediation, and follow‑up.
• Coordinate remediation efforts with IT, networking, and development teams.
• Track patch deployment and security updates across Windows and Linux environments.
• Produce technical and executive reports on vulnerability status.
• Maintain and update asset inventory and risk exposure.
• Integrate data from SIEM, EDR, and other security tools.
• Ensure adherence to ISO 27001, NIST, PCI DSS, and related standards.

Required profile

• Degree in Systems Engineering, Information Security, or a related field.
• At least 4 years of experience in cybersecurity, focusing on vulnerability management or offensive/defensive security.
• Advanced conversational English (C1+).

Required skills

• Vulnerability scanning tools: Nessus, Qualys, OpenVAS.
• Understanding of CVSS metrics.
• Patch management and system hardening.
• Operating systems: Windows, Linux.
• Network fundamentals.
• Application security knowledge (OWASP Top 10).
• Frameworks: NIST, MITRE ATT&CK.
• Scripting: Python, Bash, PowerShell.
• Integration with SIEM and EDR solutions.