Vulnerability Management Consultant

Description

**Company Description** Devoteam is a leading European consulting firm specializing in digital strategy, technology platforms, cybersecurity, and business transformation through technology. Technology is part of our DNA, and we believe in it as a lever capable of driving positive change, maintaining a balance that allows us to offer our client portfolio top-tier technological tools—always accompanied by the proximity and professionalism of a team acting as a guide throughout the journey. For over 30 years, Devoteam has been committed to technology serving people. We have more than 11,000 employees across the group, distributed across 25 countries in Europe, the Middle East, and Africa. **Job Description** At Devoteam CyberTrust, we are seeking a Vulnerability Management Consultant to join our company. Responsibilities / Technologies / Years of Experience / Competencies Key Responsibilities  Managing and monitoring the full vulnerability lifecycle.  Analyzing, prioritizing, and tracking remediation plans.  Performing technical validation of vulnerabilities and verifying their resolution.  Automating tasks and processes related to vulnerability management.  Developing and maintaining scripts to automate remediations and repetitive tasks.  Managing and monitoring service KPIs and metrics.  Coordinating with Infrastructure, Systems, Workplace, and Development teams to execute remediations.  Reviewing Vulnerability Assessment, Penetration Testing, and security audit reports.  Supporting architecture initiatives and projects from a cybersecurity perspective.  Managing and automating tasks within the Vulnerability Management platform.  Preparing technical documentation, procedures, and runbooks. Technologies  Vulnerability Management platforms (Qualys, Tenable, Microsoft Defender VM, or similar).  NinjaOne (highly desirable).  Microsoft Defender.  PowerShell.  Windows Server and Windows Desktop.  Linux.  Active Directory.  WAF.  SIEM.  EDR.  Antivirus.  DLP.  Network security.  Cloud security.  Infrastructure and endpoints. Years of Experience  2\-3 years in technical cybersecurity roles.  Specific experience in vulnerability management and remediation, and process automation will be valued. Key Competencies  Strong analytical ability and problem-solving skills.  Efficient organization and time management.  Ability to work under pressure and manage multiple priorities.  Clear communication with technical teams and clients, especially in English.  Collaborative work with internal teams and vendors.  Proactivity and orientation toward continuous improvement.  Results-oriented mindset and process automation focus. Demonstrable Knowledge  Vulnerability management and risk analysis.  Interpretation of CVEs, CVSS, CISA KEV, and prioritization criteria.  Review and interpretation of technical reports from Vulnerability Assessments, Penetration Tests, and audits.  Knowledge of patching, hardening, and configuration management.  Technical understanding of networks, systems, architecture, development, and APIs.  Experience with security tools—even if not expert in all of them.  Scripting (PowerShell) and automation knowledge. **Qualifications** Education and/or Certifications  Bachelor’s degree in Computer Engineering, Telecommunications, or related field; or Higher Vocational Training in Computer Science or Systems.  Specialized training in Cybersecurity.  The following certifications will be valued: o CompTIA Security\+ o CompTIA CySA\+ o Microsoft Security (SC\-200, SC\-300, or SC\-100\) o Qualys VMDR o Tenable Certified o ITIL Foundation o Other certifications related to Vulnerability Management or Blue Team.