Senior Security Analyst - Threat and Vulnerability Management

Description

The company is hiring a Senior Security Analyst for active threat and vulnerability defense in Warsaw. The role strengthens the company's security posture by combining live threat intelligence with risk ranking across enterprise assets.

You will find, assess and explain weaknesses across the company's systems, improve the security toolset through automation and integration, and work with defense, patching, application, development and security leadership teams. The post is for experienced professionals.

Responsibilities

• Assess endpoints, servers, networks and cloud assets for weaknesses, using advanced tools and methods to find them before attackers do.
• Set up continuous monitoring that tracks vulnerabilities and threats as they appear, using threat intelligence feeds and automated tools to keep an current view of the threat landscape.
• Lead the building and improvement of automated detection, reporting and fix workflows, working with other teams to cut the attack surface.
• Validate findings with security, infrastructure and development teams, give them risk context, and support coordinated fixes. Track remediation progress and confirm that issues are closed in time.
• Work with Threat Intelligence and Threat Hunting teams to bring actionable insights into vulnerability work and use them to shape management strategy and decisions.
• Prepare and present clear reports on vulnerability posture and risk work for technical staff, non-technical staff and executive leadership.
• Regularly review internal tools and processes for tracking threats, exposures and fixes, and improve them. Keep up with best practices and new technologies.
• Stay current on global threat trends, security advisories and zero-day vulnerabilities, and take part in learning on vulnerability frameworks, tools and new security practices.
• Guide and mentor junior analysts and team members, encouraging knowledge sharing and ongoing improvement.

Requirements

• A bachelor's degree or higher in Computer Science, Cyber Security or a related field, or equivalent hands-on experience.
• At least 3 years in cyber defense, with a strong focus on vulnerability management, threat intelligence, incident response or offensive security.
• Proven work in a vulnerability management role or cyber defense team, with a thorough grasp of the vulnerability management lifecycle and its frameworks.
• Ability to link threat intelligence with vulnerability, asset, network and incident data to rank risks well.
• Clear communication skills, with the ability to explain complex technical matters to technical and non-technical audiences, including executives.
• Advanced technical skills: scripting in Python, Bash, PowerShell or similar, plus API integration, automation and security tool use.
• Ability to work with SOC analysts, application owners, patching teams and security leaders to address a threat.
• You should have deep technical knowledge of the following:
• Vulnerability analysis: complex analysis of exploit code behavior and properties, and proposing effective countermeasures and mitigations.
• Vulnerability management platforms: modeling vulnerability data and building workflows.
• Vulnerability identification: setting up or troubleshooting scans for networks and endpoints, and optionally for cloud and SAP.
• Network security (IPS/IDS), security protocols, operating systems (Windows, Unix, Linux), and log analysis and correlation.
• A solid grasp of the security threat landscape.

Conditions

Full-time employment under a Polish employment contract (Umowa o Pracę) only. Candidates must accept this to apply.

Hybrid work: you can work from home two days a week and spend the rest in the office.

Based in Warsaw.

The company is an equal opportunity employer and values diversity.

Benefits

• Full ownership of projects and autonomy to deliver change and results from day one.
• A supportive, energetic workplace that puts people first, encourages new ideas, and supports agility and work-life balance.
• Ongoing coaching and mentoring from your line manager and colleagues, plus corporate and functional training from day one.
• Industry certifications such as ITIL and DevOps, private healthcare, sport cards, an on-site fitness centre, stock options, savings plans, a lunch subsidy, regular pay rises, possible promotions, flexible working arrangements and mentoring programs.
• A broad view of the company's IT and product supply organization and its services across global, multi-functional teams in several continents.