Tech Vulnerability Risk Management Specialist

WHAT IS TELEFONICA TECH? Telefónica Tech is the leading digital transformation company within the Telefónica Group. We offer a wide range of integrated technological services and solutions in Cybersecurity, Cloud, IoT, Big Data, Artificial Intelligence, and Blockchain, with which we accompany our clients in their digital transformation. We are a group of over 6200 brave individuals who work daily from different parts of the world to achieve excellence, through leadership based on transparency and team spirit. If you identify with our pillars, we are eager to meet you! www.telefonicatech.com

WHAT DO WE DO IN THE TEAM?

In the Offensive Security unit of Telefónica Cybersecurity & Cloud Tech, our objective is to provide organizations with an accurate and real security posture that allows us to offer our clients the discovery of critical vulnerabilities in their environment and help prioritize and address risks based on their exploitability and impact. In our team, we are responsible for managing the vulnerabilities of organizations' systems, networks, and applications. What we do is identify, evaluate, and prioritize potential threats and security weaknesses to ensure that all digital assets are protected from potential risks. We use specialized tools and testing methods to detect vulnerabilities, then analyze their severity level and work on their mitigation through patches, security configurations, and other preventive measures.

WHAT WILL YOUR DAY-TO-DAY LOOK LIKE?

Your mission will be vulnerability lifecycle management. Your day-to-day will be as follows:

• Registration and provisioning of assets in vulnerability management tools.
• Analysis of continuously reported vulnerabilities to evaluate the real probability and impact in order to adjust criticality/severity, as well as the review and cleanup of false positives.
• Support in defining prioritized remediation plans.
• Generation of monthly reports and KPIs.
• Installation of vulnerability scanning probes.
• Review and improvement of scanning profiles.
• Opening and management of client requests on the ticketing platform.
• Service follow-up meetings.
• Perform automations using scripts.

AND FOR THAT, WE BELIEVE IT WOULD BE IDEAL FOR YOU TO HAVE…

Experience

• Minimum of 1.5 years of experience in vulnerability lifecycle management projects.

Education

• University degree, intermediate/superior vocational training degree, or equivalent professional experience.
• Desirable: Possession of certifications related to Tenable or Qualys manufacturers.

Technical Knowledge

• Technical knowledge in vulnerability scanning tools (Nexpose/Nessus Professional/Tenable/Qualys/Nuclei/etc..).
• Programming and scripting languages in Python, bash, powershell, etc...

To perform the role, the skills that would fit with the team and the project would be:

• Passionate about technology and offensive security.
• Creativity and a hacker's instinct.
• Proactivity, ability to take on challenges.
• Ability to convey technically complex ideas to a non-technical audience.
• Teamwork skills.

Languages

• Required:
• Native Spanish.
• English B2

WHAT DO WE OFFER?

• Work-life balance measures and flexible working hours.
• Continuous training and certifications.
• Hybrid remote work model.
• Attractive social benefits package.
• Excellent dynamic and multidisciplinary work environment.
• Volunteer programs.

#WeAreDiverse #WePromoteEquality We are convinced that diverse and inclusive teams are more innovative, transformative, and achieve better results. That's why we promote and guarantee the inclusion of all people regardless of gender, age, sexual orientation and identity, culture, disability, or any other condition. We want to meet you! ?