{"id":3045664,"url":"https://alion.io/job/sysco-engineer-cybersecurity-vulnerability-threat-management","title":"Engineer - Cybersecurity (Vulnerability & Threat Management)","company":{"id":1771007,"name":"Sysco","domain":"sysco.com","url":"https://alion.io/company/sysco-com","size_band":"5000+","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":81,"open_postings":28,"ghost_share":0,"stale_share":0.964,"repost_share":0,"time_to_fill_p50_days":7,"computed_at":"2026-10-25T05:49:26Z"}},"role":"Security","role_family":"Security","seniority":"junior","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"explicit","locations":["Poland"],"countries":["PL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":33000,"max_usd":71000,"period":"year","method":"role_seniority_country_cell","sample_n":8},"experience_years_min":2,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"DNS","optional":false},{"name":"Java","optional":false},{"name":"LDAP","optional":false},{"name":"Metasploit","optional":false},{"name":"Nessus","optional":false},{"name":"Perl","optional":false},{"name":"Python","optional":false},{"name":"Ruby","optional":false},{"name":"VPN","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-05-13T00:00:00Z","employer_posted_date":"2026-05-13","last_verified_at":"2026-10-26T02:19:15Z","board_verified":true,"closed_at":null,"days_open":166,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":165},"description":"JOB DESCRIPTION\nEngineer - Cybersecurity (Vulnerability & Threat Management)\nLocation: Krakow, Poland (Hybrid)\nType: Full-time employment\nHybrid work: 2 days in office and 3 days remote\nWorking Hours: 9 am - 5 pm local time\nDescription\nDuties will include providing vulnerability assessment and remediation activities through a comprehensive testing process, as well as identifying weaknesses and vulnerabilities within the systems and proposing countermeasures. Typical assignments will involve testing of the overall security of critical infrastructure components and applications to ensure they comply with internal policies, security architecture best practices, and industry standards; scanning and discovering rouge hosts, networks, and devices; and scanning and discovering vulnerable systems and applications.\nResponsibilities\nPlans, develops and executes scans for vulnerabilities and compliance with configuration standards\nManages enterprise vulnerability assessment and configuration assessment tools\nWorks to identify and resolve false positive findings in assessment results\nAnalyzes threat and vulnerability feeds and analyzes data for applicability to Sysco’s environment\nWorks with applicable technical teams to ensure remediation of discovered vulnerabilities\nCoordinates change control for remediation activities\nResponsible for generating timely vulnerability assessment reports to management\nGenerate reports on assessment findings and summarizes to facilitate remediation tasks for other operational teams\nProduces vulnerability, configuration, and coverage metrics to demonstrate assessment coverage and remediation effectiveness\nRecommends security controls and/or corrective actions for mitigating technical and business risk\nAssists in conducting security reviews of new and existing applications\nMaintains an awareness of existing and proposed security standards, industry best practices, legislation and regulations pertaining to information security and recommends appropriate changes\nPrevents/anticipates problems and focus on continuous improvement of manual and automated processes\nOptimizes existing workflows to enhance existing capabilities\nCreates and updates documentation related to assessment processes\nQualifications\nCandidates for this position should have at least 2 years of experience of the following:\nConducting vulnerability assessments and penetration testing (application and/or infrastructure) and articulating security issues to technical and non-technical audience\nIdentifying, researching, validating, and exploiting various different known and unknown security vulnerabilities on server and client side\nVulnerability Assessment tools, e.g. Nessus, Nexpose, etc\nExploitation frameworks, e.g. Metasploit\nSocial Engineering campaigns, e.g. email phishing, phone calls, SET\nSecurity devices, e.g. Firewalls, VPN, Proxies\nOS Security, e.g. Unix, Linux, Windows, Cisco, etc\nUnderstanding of common protocols, e.g. LDAP, SMTP, DNS, Routing Protocols\nWeb application infrastructure, e.g. Application Servers, Web Servers, Databases\nWeb development and programming languages i.e. Python, Perl, Ruby, Java, and/or .Net\nReporting information security vulnerabilities to businesses\nKnowledge of tools and processes used to expose known and undocumented vulnerabilities in various different systems.\nKnowledge / Skills / Abilities:\nSubject matter expert in a broad range of security concepts\nBroad IT knowledge and experience, including an understanding of network devices and their role in a secure environment\nAbility to work directly with team members and end-users in stressful situations\nAbility to work in a dynamic environment\nAbility to solve complex problems through research and technical detective work\nAbility to learn new technologies and processes quickly\nAbility to quickly adapt to changes in timelines and sequences\nAble to work off hours when required\nExcellent communication and interpersonal skills\nCollaboration skills\nWhy Join Us\nBe part of a global cybersecurity team protecting a dynamic enterprise environment. \nOpportunity to work with modern security technologies and drive tool innovation. \nCollaborative culture with professional development opportunities. \nHybrid work model with our Kraków office as the primary location.","description_format":"text","description_chars":4293,"description_truncated":false,"requirements":{"experience_years_min":2,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Hybrid work","Professional development"],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Information Security","Wholesale","Food Logistics"],"lifecycle":[{"event":"open","at":"2026-10-22T00:19:48Z"}],"visa":[],"liveness":{"score":1,"band":"cold","label":"Long shot","p_open":0.9,"p_active":0.05,"p_room":0.28,"age_days":165,"expected_fill_days":7,"reasons":["conf:73","stale_co","velocity","win:tail","crowd:junior,brand"],"computed_at":"2026-10-25T05:49:26Z"},"pay":null,"html_url":"https://alion.io/job/sysco-engineer-cybersecurity-vulnerability-threat-management","json_url":"https://alion.io/job/sysco-engineer-cybersecurity-vulnerability-threat-management.json","meta":{"generated_at":"2026-10-26T03:14:01Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":4267,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-27T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1771007},"rest":"https://alion.io/mcp/rest/get_company?id=1771007"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsysco-engineer-cybersecurity-vulnerability-threat-management"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsysco-engineer-cybersecurity-vulnerability-threat-management"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsysco-engineer-cybersecurity-vulnerability-threat-management"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sysco-engineer-cybersecurity-vulnerability-threat-management\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsysco-engineer-cybersecurity-vulnerability-threat-management"}]}