{"id":2413848,"url":"https://alion.io/job/stefanini-cyber-security-services-css-vulnerability-analyst","title":"Cyber Security Services (CSS) Vulnerability Analyst","company":{"id":4425653,"name":"Stefanini EMEA","domain":"stefanini.ro","url":"https://alion.io/company/stefanini-ro","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartSearch","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Poland","Moldova","Hungary","Romania"],"countries":["PL","MD","HU","RO"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":46000,"max_usd":82000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":16},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CVE","optional":false},{"name":"CWE","optional":false},{"name":"IAM","optional":false},{"name":"Microsoft Defender","optional":false},{"name":"Nessus","optional":false},{"name":"Qualys Cloud Platform","optional":false}],"status":"live","first_seen_at":"2026-09-21T12:00:00Z","employer_posted_date":"2026-10-13","last_verified_at":"2026-10-13T21:14:15Z","board_verified":true,"closed_at":null,"days_open":22,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":22},"description":"Stefanini Group is seeking a skilled Cyber Security Services (CSS) Vulnerability Analyst to join our Security Operations Center (SOC), which operates as a Managed Security Service Provider (MSSP).\nAs a CSS Vulnerability Analyst, you will act as the technical point of contact for vulnerability management activities. You will independently deliver vulnerability assessment services, support client interactions, and provide actionable risk-based insights while ensuring high-quality service delivery within an MSSP environment.\nWork Schedule: Monday- Friday,08:00 - 17:00 CET\nJob Responsibilities:\nServe as a technical escalation point for client vulnerability management-related issues.\nPerform vulnerability assessment scanning, false positive validation, compliance scanning, and policy configuration using various vulnerability management tools.\nReview security vulnerabilities across multiple technologies and environments to identify high-risk issues affecting business assets.\nConduct risk, threat, and vulnerability analysis, including understanding exploitation techniques and attack paths.\nProvide clear remediation guidance and assist clients in prioritizing vulnerabilities based on risk and impact.\nSupport patch management and remediation tracking activities.\nIntegrate, analyze, and communicate vulnerability metrics, trends, and risk posture to clients and internal management.\nEnsure vulnerability management activities comply with defined SLAs, processes, and client requirements.\nContribute to continuous improvement of vulnerability management processes and reporting.\nParticipate in mentoring junior analysts and knowledge-sharing activities.\nEducation:\nPreferred: Bachelor's degree in computer science, Information Technology, Engineering, or a related field.\nMinimum education requirement: High school studies completed with Baccalaureate diploma.\nLanguage proficiency:\nExcellent English communication skills, both verbal and written, for professional communication and documentation.\nExperience:\n3-5 years of experience in cybersecurity operations, including at least 2 years of hands-on experience in vulnerability and/or patch management.\nHands-on experience with vulnerability assessment tools such as Microsoft Defender Vulnerability Management, Nessus, Qualys, or Rapid7.\nMandatory Technical Skills:\n Proficiency with vulnerability assessment tools, such as Microsoft Defender Vulnerability Management, Nessus, Qualys, and/or Rapid7.\nStrong understanding of vulnerability classes and classification schemes (CVE, CVSSv2/v3, CWE, CPE).\nStrong ability to analyze vulnerabilities and assign meaningful severity and remediation priorities.\nGood technical knowledge of networks, firewalls, operating systems, and enterprise environments.\nUnderstanding of related security domains (e.g., Incident Response, IAM, Threat Assessment).\nPreferred / Nice-to-Have Qualifications:\nHands-on certifications in vulnerability management.\nDemonstrated experience working in a Security Operations Center, Global Security Operations Center, Managed Security Service, or similar 24/7 operational environment.\nProfessional Skills:\nStrong communication and collaboration skills, enabling effective interaction with a diverse range of technical and non-technical stakeholders and internal teams.\nA customer-focused mindset dedicated to delivering exceptional service.\nA collaborative mindset with an interest in internal operations and process improvement.\nStrong organizational, attention to detail, analytical thinking and a proactive approach to problem-solving.\nAbility to work independently and manage multiple priorities in an MSSP environment.\nAbility to quickly adapt to changes, new requirements, or sudden shifts in direction.\nA commitment to continuous learning and improvement, staying abreast of industry best practices, emerging technologies, and methodologies.\nAbsolute discretion and integrity in handling sensitive customer information and critical infrastructure data.\nAvailability for on-call responsibilities, if required.\nWhat's next:\nIt's best to apply today, because job postings can be taken down and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at  and we'll be happy to assist!\nThe preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.\nDiversity & Inclusion\nHere at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!\nAbout us\nWe are the Stefanini group, a global tech consulting company of Brazilian origin that believes in the power of people to transform businesses through technology.\nWe are present in over 40 countries and operate with the purpose of co-creating solutions TOGETHER WITH OUR CLIENTS that accelerate results and improve the experience of people and organizations.\nHere, we like to say that technology is not the end, but the means: what really matters are the people who drive it all.\nOur mindset is AI First, meaning we invest in cutting-edge technology in everything we do, focusing on results for our clients.\nWe are a company, A GROUP, that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.\nMore than just talking about digital transformation, we believe in real transformation that starts with people and impacts real businesses.\nIf you are looking for a place to develop, innovate, and be part of something bigger, the Stefanini Group is your place.\nWe want to inform you that there are currently scams targeting job seekers by falsely using our company's name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.\nPlease remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.\nIf you suspect you've been targeted, please contact us immediately at  for verification.\nKey Points to Remember:\n* Legitimate job offers only follow interviews conducted with our hiring managers or clients.\n* We will never ask for payment at any stage of the recruitment process.\nStay vigilant and feel free to reach out for verification. Your safety and security are our top priorities. Thank you for your understanding and cooperation.\nEducation:\nPreferred: Bachelor's degree in computer science, Information Technology, Engineering, or a related field.\nMinimum education requirement: High school studies completed with Baccalaureate diploma.\nLanguage proficiency:\nExcellent English communication skills, both verbal and written, for professional communication and documentation.\nExperience:\n3-5 years of experience in cybersecurity operations, including at least 2 years of hands-on experience in vulnerability and/or patch management.\nHands-on experience with vulnerability assessment tools such as Microsoft Defender Vulnerability Management, Nessus, Qualys, or Rapid7.\nMandatory Technical Skills:\n Proficiency with vulnerability assessment tools, such as Microsoft Defender Vulnerability Management, Nessus, Qualys, and/or Rapid7.\nStrong understanding of vulnerability classes and classification schemes (CVE, CVSSv2/v3, CWE, CPE).\nStrong ability to analyze vulnerabilities and assign meaningful severity and remediation priorities.\nGood technical knowledge of networks, firewalls, operating systems, and enterprise environments.\nUnderstanding of related security domains (e.g., Incident Response, IAM, Threat Assessment).\nPreferred / Nice-to-Have Qualifications:\nHands-on certifications in vulnerability management.\nDemonstrated experience working in a Security Operations Center, Global Security Operations Center, Managed Security Service, or similar 24/7 operational environment.\nProfessional Skills:\nStrong communication and collaboration skills, enabling effective interaction with a diverse range of technical and non-technical stakeholders and internal teams.\nA customer-focused mindset dedicated to delivering exceptional service.\nA collaborative mindset with an interest in internal operations and process improvement.\nStrong organizational, attention to detail, analytical thinking and a proactive approach to problem-solving.\nAbility to work independently and manage multiple priorities in an MSSP environment.\nAbility to quickly adapt to changes, new requirements, or sudden shifts in direction.\nA commitment to continuous learning and improvement, staying abreast of industry best practices, emerging technologies, and methodologies.\nAbsolute discretion and integrity in handling sensitive customer information and critical infrastructure data.\nAvailability for on-call responsibilities, if required.\nWhat's next:\nIt's best to apply today, because job postings can be taken down and we wouldn't want you to miss this opportunity. In case you need further information, just send us a message at  and we'll be happy to assist!\nThe preceding job description had been designed to indicate the general nature and level of work performed by employees within this classification. It is not designed to contain or be interpreted as a comprehensive inventory of all duties and responsibilities required of employees assigned to this job.\nDiversity & Inclusion\nHere at the Stefanini Group, we value plurality and equity, regardless of race, sexual orientation, disability, age, ancestry, religion, gender, and nationality. We understand and encourage the importance of being you!\nAbout us\nWe are the Stefanini group, a global tech consulting company of Brazilian origin that believes in the power of people to transform businesses through technology.\nWe are present in over 40 countries and operate with the purpose of co-creating solutions TOGETHER WITH OUR CLIENTS that accelerate results and improve the experience of people and organizations.\nHere, we like to say that technology is not the end, but the means: what really matters are the people who drive it all.\nOur mindset is AI First, meaning we invest in cutting-edge technology in everything we do, focusing on results for our clients.\nWe are a company, A GROUP, that breathes collaboration and offers a dynamic environment where you will learn by doing, grow alongside the team, and have space to contribute with ideas and projects.\nMore than just talking about digital transformation, we believe in real transformation that starts with people and impacts real businesses.\nIf you are looking for a place to develop, innovate, and be part of something bigger, the Stefanini Group is your place.\nWe want to inform you that there are currently scams targeting job seekers by falsely using our company's name, Stefanini. We sincerely apologize for any confusion or inconvenience this may have caused.\nPlease remember that legitimate job offers from Stefanini will always come through official channels, including direct communication with our trained recruiters. If you receive any unsolicited messages requesting payment or personal information, please disregard them.\nIf you suspect you've been targeted, please contact us immediately at  for verification.\nKey Points to Remember:\n* Legitimate job offers only follow interviews conducted with our hiring managers or clients.\n* We will never ask for payment at any stage of the recruitment process.\nStay vigilant and feel free to reach out for verification. Your safety and security are our top prioriti...","description_format":"text","description_chars":12053,"description_truncated":true,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"high_school","optional":true},"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":true}]},"benefits":["Continuous learning","Equity"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security"],"lifecycle":[{"event":"open","at":"2026-10-13T02:45:44Z"}],"visa":[],"liveness":{"score":55,"band":"ok","label":"Likely open","p_open":1,"p_active":0.736,"p_room":0.75,"age_days":21,"expected_fill_days":24,"reasons":["conf:0","win:late"],"computed_at":"2026-10-13T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/stefanini-cyber-security-services-css-vulnerability-analyst","json_url":"https://alion.io/job/stefanini-cyber-security-services-css-vulnerability-analyst.json","meta":{"generated_at":"2026-10-13T23:17:05Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":35397,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-14T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4425653},"rest":"https://alion.io/mcp/rest/get_company?id=4425653"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fstefanini-cyber-security-services-css-vulnerability-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fstefanini-cyber-security-services-css-vulnerability-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fstefanini-cyber-security-services-css-vulnerability-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/stefanini-cyber-security-services-css-vulnerability-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fstefanini-cyber-security-services-css-vulnerability-analyst"}]}