Cyber Security Engineer

Your new company For our client, a global organisation operating in a complex international environment, we are currently looking for a Cybersecurity Engineer specialising in Vulnerability & Threat Management to join its cybersecurity team in Kraków. The organisation offers the opportunity to work with modern security technologies, enterprise-scale infrastructure and a global team focused on continuously improving cybersecurity capabilities. Your new role As a Cybersecurity Engineer, you will be responsible for identifying, assessing and supporting the remediation of vulnerabilities across applications, systems and infrastructure. Your key responsibilities will include: - Planning and executing vulnerability and configuration compliance scans. - Managing enterprise vulnerability assessment tools such as Nessus or Nexpose. - Analysing assessment results, validating findings and identifying false positives. - Monitoring vulnerability and threat intelligence feeds and assessing their relevance to the organisation’s environment. - Working closely with technical teams to coordinate vulnerability remediation activities. - Performing security reviews of applications, infrastructure and security configurations. - Producing vulnerability reports, security metrics and remediation recommendations for technical teams and management. - Recommending appropriate security controls and corrective actions to reduce technical and business risk. - Continuously improving and automating vulnerability management processes and workflows. - Maintaining documentation related to vulnerability assessment and remediation processes. What you'll need to succeed To succeed in this role, you should have at least 2 years of hands-on experience in cybersecurity, particularly within vulnerability management, vulnerability assessment or penetration testing. You should also have: - Practical experience with vulnerability assessment tools such as Nessus, Nexpose or similar. - Experience conducting vulnerability assessments and/or penetration tests across applications and infrastructure. - Knowledge of exploitation tools and frameworks such as Metasploit. - Good understanding of Windows, Linux/Unix, networks, firewalls, VPNs and proxies. - Understanding of common network protocols including DNS, LDAP, SMTP and routing protocols. - Knowledge of web application infrastructure, including application servers, web servers and databases. - Familiarity with scripting or programming languages such as Python, Perl, Ruby, Java or .NET. - Ability to analyse, validate and clearly communicate security vulnerabilities to both technical and non-technical stakeholders. - Strong analytical, problem-solving and communication skills. - Ability to work effectively in a dynamic, international environment. What you'll get in return - Full-time employment. - Hybrid working model: 2 days per week in the Kraków office and 3 days remotely. - Opportunity to join a global cybersecurity team and work within a large-scale enterprise environment. - Exposure to modern cybersecurity technologies and vulnerability management solutions. - Opportunities for professional development and expanding your cybersecurity expertise. - Private medical care. - MultiSport card. - Cafeteria benefits platform. - Life insurance. - Integration events. - Modern, well-equipped office - On-site employee parking.