Senior Vulnerability Management

Devoteam is a leading European consultancy focused on digital strategy, technological platforms, cybersecurity, and business transformation through technology. Technology is in our DNA and we believe in it as a lever capable of driving change for the better, maintaining a balance that allows us to offer our client portfolio top-tier technological tools, but always with the closeness and professionalism of a team that acts as a guide along the way. Devoteam has been committed to technology at the service of people for more than 30 years. With more than 10,000 people in the group, in 20 countries across Europe, the Middle East, and Africa.

We are looking to incorporate a senior profile in Cybersecurity for a stable project, with demonstrable experience in vulnerability management and security findings, Pentest, Red Team, and offensive security tools. The project requires a hybrid work modality (3 days remote work, 2 days in person in offices in Tres Cantos) Main functions Management and monitoring of security findings and vulnerabilities, from identification to resolution and closure. Detailed review and interpretation of technical reports coming from offensive security exercises and other detection sources. Ability to technically understand findings, evaluate their impact, and determine the necessary actions for their correction. Proposal of concrete solutions and remediation measures, communicating them clearly to the responsible teams. Prioritization of findings based on criticality, risk, exposure, and context. Monitoring of remediation plans and coordination with different teams. Validation of actions taken and monitoring until the closure of findings. Coordination with technical, infrastructure, systems, development, security teams, and other involved stakeholders. Preparation and monitoring of reports, KPIs, and the status of vulnerabilities/findings. Participation in monitoring and coordination meetings with the different teams. Tools: Offensive security: External Pentest / Red Team. Pentera. Synack. Picus (recently implemented; pending to start reporting findings). Entity findings: Results coming from annual pentests performed on the entities' sites. Attack surface: Pentera Surface. INCIBE. BitSight.

English B2