At Consultec, we are looking for a Vulnerability Management Specialist responsible for identifying, analyzing, prioritizing, and tracking vulnerabilities in technology infrastructure, with the goal of reducing the attack surface and strengthening the organization’s security posture.

This role is key within the preventive cybersecurity cycle, as it enables us to anticipate threats through continuous assessments, patch management, and coordination with technical teams for effective remediation.

We are looking for a technical, analytical, and proactive candidate with experience in scanning tools, risk analysis, and vulnerability management in corporate environments.

Key Responsibilities

• Conduct periodic vulnerability scans of infrastructure, applications, and endpoints.

• Analyze, validate, and prioritize vulnerabilities based on severity (CVSS, impact, and exposure).

• Manage the full vulnerability lifecycle: identification, analysis, remediation, and follow-up.

• Coordinate with IT, networking, and development teams to address findings.

• Track the deployment of patches and security updates.

• Generate technical and executive reports on the status of vulnerabilities.

• Define and optimize vulnerability management processes.

• Keep the asset inventory and its risk exposure up to date.

• Integrate information from tools such as SIEM, EDR, and vulnerability scanners

• Ensure compliance with security standards (ISO 27001, NIST, PCI DSS).

Requirements

Education: Degree in Systems Engineering, Information Security, or a related field.

Experience: +4 years in cybersecurity, with a focus on vulnerability management or offensive/defensive security.

Advanced Conversational English (C1+)

Technical Skills:

Scanning tools such as Nessus, Qualys, or OpenVAS.

Interpretation of metrics such as CVSS.

Patch management and system hardening.

Operating systems (Windows, Linux) and networks.

Knowledge of application security (OWASP Top 10).

Frameworks such as NIST and MITRE ATT&CK.

Basic scripting (Python, Bash, PowerShell).

Preferred Certifications

CompTIA Security+

CEH – Certified Ethical Hacker

OSCP – Offensive Security Certified Professional

GIAC certifications, such as GPEN or GSEC