Vulnerability Management Specialist

We are looking for an experienced Vulnerability Management Specialist to join a global cybersecurity team responsible for strengthening security posture through vulnerability management, patch governance, penetration testing oversight, and code review monitoring. You will collaborate with IT teams, cybersecurity stakeholders, and international counterparts to ensure vulnerabilities are identified, prioritized, and remediated in a timely manner.

Work Model: Hybrid (2–3 days per week in the office – Porto)

Key Responsibilities

• Ensure all eligible assets are covered by vulnerability scanning processes and security assessment tools.
• Monitor the execution and success of vulnerability scans across infrastructure and applications.
• Analyze scan results, prioritize findings, and coordinate remediation activities with relevant teams.
• Monitor the deployment of critical security patches and track remediation progress.
• Identify impacted systems and coordinate communication related to critical vulnerabilities and patching requirements.
• Prepare and communicate regular progress reports and remediation status updates.
• Coordinate penetration testing activities across IT environments.
• Review penetration testing results, prioritize remediation actions, and monitor closure of identified findings.
• Ensure penetration testing services comply with established security requirements and standards.
• Monitor the coverage and effectiveness of code review and application security scanning solutions.
• Contribute to the continuous improvement of vulnerability management and cybersecurity processes.
• Produce operational and management reports on security posture, vulnerabilities, and remediation activities.

Required Skills & Experience

• Minimum of 5 years of experience in IT environments.
• Good understanding of infrastructure, applications, and enterprise IT environments.
• Experience with vulnerability management processes and security remediation activities.
• Knowledge of vulnerability scanning, patch management, penetration testing, and code review practices.
• Understanding of cybersecurity principles and security risk management.
• Experience analyzing security findings and coordinating remediation plans with technical teams.
• Strong reporting and stakeholder communication skills.
• Advanced knowledge of Microsoft Excel.
• Ability to prioritize activities and manage multiple stakeholders simultaneously.
• Strong analytical and problem-solving skills.
• Excellent communication and meeting facilitation skills.
• Detail-oriented, organized, and delivery-focused mindset.
• Professional proficiency in English, both written and spoken.

If you're passionate about cybersecurity, vulnerability management, and helping organizations strengthen their security posture through proactive risk reduction and remediation initiatives, we'd love to hear from you.