Senior Vulnerability Response Specialist – Cybersecurity

Unleash Groundbreaking Vulnerability Management — Drive Security Excellence in Financial Technology!

Kraków-based opportunity with hybrid work model.

As a Senior Vulnerability Response SME, you will be working for our client in the global cybersecurity landscape, driving critical vulnerability management initiatives within the HSBC Cybersecurity team. Your expertise will shape the security posture of enterprise technology environments, ensuring rapid identification, assessment, and remediation of high-severity vulnerabilities to safeguard financial operations and client assets. This role offers a dynamic career path in a forward-thinking organization committed to innovation and security excellence.

Your main responsibilities:

• Review and analyze critical and high-severity vulnerabilities from sources such as NIST/NVD and vendor advisories, assessing their impact on our technology estate.
• Validate vulnerability findings through detailed technical evidence collection, confirming true/false positives.
• Map vulnerabilities to assets by collaborating with CMDB, inventory sources, and service owners, ensuring accurate impact assessments.
• Develop and deliver comprehensive remediation strategies, including patches, configuration hardening, and practical workarounds.
• Produce high-quality technical documentation addressing root cause analysis, attack paths, business impact, and step-by-step remediation guidance.
• Coordinate remediation activities with infrastructure, platform, and application teams, tracking progress via integrated management tools.
• Verify the effectiveness of remediation actions through re-scans and validation testing.
• Support regulatory, audit, and governance requests by providing detailed reports and analysis, ensuring compliance and risk mitigation.

You’re ideal for this role if you have:

• Minimum of 5 years’ experience in IT Security or a related field, with a focus on vulnerability management.
• Proven expertise reviewing and assessing vulnerabilities from sources like NIST/NVD and vendor advisories.
• Strong understanding of attack techniques such as remote code execution, privilege escalation, and authentication bypass.
• Practical knowledge of vulnerability identification tooling, including Tenable Nessus, SAST/DAST, and integration with CI/CD pipelines.
• Solid foundation in networking and application security, including WAFs, TLS, and cloud/on-prem environments.
• Strong stakeholder management and communication skills.
• Fluent English language proficiency.
• Ability to work legally in the European Union.

It’s a strong plus if you have:

• Certifications such as CISSP, OSCP, or equivalent.
• Experience supporting regulatory audits and cybersecurity governance processes.
• Knowledge of vulnerability management tools like Wiz, Axonius, ServiceNow VRM, or JIRA.

Eligibility for the role:

Only candidates with an existing legal right to work in the European Union will be considered for this role.

#MAKEYourCareerBETTER

Interested? Apply now and include your CV (preferably in English) along with a statement confirming your consent to the processing and storage of your personal data.