Vulnerability Management Specialist

Overview:

The Vulnerability Management Specialist will actively participate on the continuous improvement of the Cardif’s Cybersecurity performance device. Within this area, he/she will have a transversal knowledge of Cardif environement and departments as he/she will work daily with different counterparts (Cardif IT, Cybersecurity teams all over the world…). 

What will you do?

• Ensure that all Cardif assets are subject to regular vulnerability scans and that identified vulnerabilities are remediated.


• Monitor the deployment of critical patches.


• Ensure that all eligible Cardif assets are subject to regular code reviews and that identified vulnerabilities are remedied.


• Vulnerability scans.


• Monitor that all Cardif assets are covered by the vulnerability scannig tools.


• Monitor that all Cardif assets are regularly and successfully scaned.


• Examine scan tests results, prioritize and propose remediation plans and follow-up to the concerned Cardif Entities. 


• Analyze critical patches information and identify impacted perimeters.


• Alert Cardif Entities impacted by critical patches.


• Follow the progress of the deployment of critical patches.


• Formalize and communicate a progress report Analyze critical patches information and identify impacted perimeters.


• Alert Cardif Entities impacted by critical patches.


• Follow the progress of the deployment of critical patches.


• Formalize and communicate a progress report.


• Monitor and request penetration tests on behalf of Cardif entities.


• Analyze test results, prioritize and propose remediation plans, monitor remediation.


• Control the quality and alignment with the requirements of the group of the services provided by the penetration test providers.


• Monitor that eligible Cardif assets (internal and external) are covered by the code review tools.


• Monitor that all Cardif assets are regularly and successfully scaned.

What are we looking for?

• Minimum 5 years’ experience in IT field.


• Wide vision on IT field.


• Cybersecurity knowledge/expirience is a plus.


• Very good oral and written English.


• Produce regular and on demand reports about all topics.


• MS Excel advanced knowledge.


• Rigourous.


• Dynamic.


• Deliverable oriented.


• Client oriented.


• Collaborative working skills.


• Adaptation capacity.


• Resilience.


• Analytical skills.


• Capacity to lead meetings.


• Ability to travel within the Portugal.


• Ability to travel outside the Portugal.

What can you expect from us?

• A permanent job contract for a long term project;


• Tech equipment + SIM Card + personal smartphone;


• Health and Life Insurance;


• Social events and team buildings;


• The commitment of letting you grow with us, and be rewarded accordingly;


• A dynamic and young team that will be always there to support you;


• Training in the latest technologies;


• Coffee, fruits, snacks and a warm welcoming when you pass by the office.