Vulnerability Engineer

We are looking for a Vulnerability Engineer to work in Porto, in a hybrid model (2x per week in the office), who’s eager to embark on an exciting new opportunity! Apply here: https://form.typeform.com/to/PYqxT8NO?opportunity=Miguel%20Pereira&channel=ITJobs

About KWAN

We connect IT professionals with projects that match their skills, professional experience, and goals, then we offer a career progression program, delivered by in-house specialists - our People Experience Partners - to guide them through our journey with us.

What is this challenge about

• Join a Threat Operations team and play a key role in the organization’s vulnerability management program, with a strong focus on using AI to boost operational efficiency.
• Manage the full vulnerability lifecycle across infrastructure and endpoints, prioritizing by CVE, CVSS, KEV, exploitability and business context.
• Define remediation SLAs, follow up on progress and escalate to the right teams or management when deadlines are missed.
• Track vulnerabilities in development pipelines, cloud environments, containers and images, working closely with AppSec and Cloud Security teams.
• Assess the risk of end-of-life and end-of-support systems, applications and components.
• Critically validate tool findings, investigating false positives and confirming real vulnerabilities.
• Build dashboards, KPIs and weekly reporting for management on critical vulnerabilities and SLA status.
• Automate, document and standardize the program’s operational procedures.

Does it sound exciting? Apply now! https://form.typeform.com/to/PYqxT8NO?opportunity=Miguel%20Pereira&channel=ITJobs

What we are looking for

• Solid fundamentals in vulnerability management: CVE, CVSS, KEV, exploitability, prioritization and remediation
• Experience defining SLAs, following up on remediation and escalating when needed
• Experience building dashboards, reporting and KPIs
• Knowledge of cloud security, container and image vulnerabilities, and SSDLC concepts (SCA, SAST)
• Experience with Windows and Linux, and solid networking fundamentals (TCP/IP, DNS, HTTP/HTTPS)
• Familiarity with vulnerability management platforms such as Tenable or CrowdStrike
• Knowledge of Microsoft Azure and/or Google Cloud
• Interest in using AI to improve operational efficiency
• A critical mindset towards tool results and the ability to translate technical findings into business risk
• Strong communication, autonomy and organization in a high-volume, multi-team environment
• Nice to have: security certifications such as GEVA, CompTIA CySA+ or Security+, AZ-500 or Google Professional Cloud Security Engineer

Do you meet most of the position requirements? Then grab this opportunity and apply now! https://form.typeform.com/to/PYqxT8NO?opportunity=Miguel%20Pereira&channel=ITJobs

What we offer

• A project that matches your skills and ambitions, as well as your preferences for working policies and culture.
• A competitive salary with awesome benefits and opportunities to leverage your knowledge and network to earn additional income.
• An empowering and respectful work culture enriched with social and learning events.
• A People Experience Partner specially assigned to you - your go-to career guide, responsible for supporting your growth, facilitating training, and ensuring your work-life balance at KWAN.
• A relocation package and visa sponsorship for all our international hires.

Some Words From Our Colleagues

“At KWAN, they make sure that I feel comfortable with the client I’m working for and that what I’m doing aligns with my career aspirations.”
- Luis Caldeira, DevOps @ KWAN

Grab this opportunity, apply now! https://form.typeform.com/to/PYqxT8NO?opportunity=Miguel%20Pereira&channel=ITJobs