Exposure & Posture Management Specialist

Your tasks

• Defining and executing a comprehensive security posture strategy across both IT and OT environments, shifting the focus from simple vulnerability scanning to holistic exposure management.
• Managing end-to-end vulnerability lifecycle operations across IT infrastructure, OT systems, and web applications utilizing enterprise vulnerability management platforms and application security testing suites.
• Mapping and monitoring the attack surface (EASM & IASM) to identify external and internal blind spots, collaborating closely with threat hunting teams.
• Governing OT and supplier security postures, including hosting security governance meetings with unmonitored vendors and suppliers.
• Optimizing Cloud Security Posture Management (CSPM) by continuously monitoring and improving our security and compliance posture scores in the cloud.
• Validating security controls and exposures through continuous automated testing and breach simulation platforms to prove threat resilience.
• Mentoring and supporting team members, actively fostering a culture of knowledge sharing, continuous growth, and collective skill development across the security team.

Requirements

• Suitable academic degree in Cybersecurity, Computer Science, or a related field, alongside several years of hands-on experience in vulnerability, exposure, or attack surface management.
• A highly curious and growth-oriented mindset, with a natural drive to continuously learn, experiment, and stay ahead of the rapidly evolving threat landscape.
• A collaborative team player with a positive, constructive attitude and a genuine desire to help others succeed and grow.
• Strong technical expertise with enterprise security tools, particularly vulnerability scanners, attack surface mapping tools, and cloud security suites.
• Solid understanding of OT security frameworks and experience with specialized industrial control systems (ICS/OT) monitoring tools.
• Experience in web application security testing, including familiarity with web application scanners and crowdsourced security/bug bounty models.
• Proven stakeholder management skills, with the ability to lead governance conversations with external suppliers and vendors.
• Strong analytical mindset with the ability to translate technical exposures into actionable remediation plans for IT and business teams.

Must have:

• Security
• Web applications
• Testing
• Cloud security
• Cloud
• Automated testing
• Degree
• Cybersecurity
• Stakeholder management

What we offer

• International, diverse, and highly collaborative working environment
• Hybrid work model (2 times per week on-site)
• Private life insurance (Ergo Hestia)
• Comprehensive medical care (Lux Med)
• Pension scheme (PPK with PZU)
• Multisport card supporting an active lifestyle
• Annual performance bonus (STI) rewarding results and contribution
• Accident-free bonus awarded when defined safety targets are met and no incidents occur on the manufacturing site
• Modern office located at Żelazna 2, Katowice