Senior Vulnerability Management Specialist Prague, Praha

Senior Vulnerability Management Specialist

What we do
We are responsible for creating, implementing and monitoring a global security framework that supports safe and sound operation of the entire Home Credit Group - it is our responsibility to safeguard the data of millions of customers.
We ensure compliance with multiple regional and global regulatory requirements and monitor industry standards in order to maintain top quality Group IT Security standards and up-to-date technologies. Right now, we are looking for a colleague that will stand at the helm of global IT Security defense activities, coordinating and ensuring their successful implementation.
Who are we looking for?
We are looking for someone with proactive approach towards Security and interest in vulnerability management. If you like to actively research about new threats and vulnerabilities such as zero-day exploits and you enjoy hands on threat hunting and exploitation of vulnerabilities, this position will be right for you.
What will be your mission?
Among others your main responsibility will be area of threat and vulnerability management. Primary tool which you will use on daily basis is Qualys and you will be responsible for maintaining, configuring and continuous improvement of this tool.
Proactively search for possible threats, vulnerabilities in our infrastracture and exploit them, afterwards proceed with remediation steps.
You will also closely cooperate with Security monitoring team during handling of security events and incidents.
What will you get in return?
**Your options are almost endless**: If you come up with some new idea and you convince us that is has value, you can get full support and make things happen immediately.
**Real-world problems**: You will be working on real cyber-security projects with real data of world-wide organization.
**Mentoring**: We have resources in IT operations, cyber-security and management. If your desire is to learn and grow, we are here for you.
**Training**: If you grow, we grow. We understand that education is the best investment possible. Therefore, we will offer you trainings, education resources, and most importantly, real world experience of first-class experts
**Skills, knowledge and experience required for the position**:
At least 2+ years of experience in IT Security (preferably vulnerability management or penetration testing background)
Experience with managing or using VM tool like Qualys, Nessus or any other
Hands on experience with threat hunting, exploitation of vulnerabilities
Knowledge of MITRE ATT&CK type of attacks and techniques
Basic level scripting in Python, Bash or PowerShell
Understanding and knowledge of IT systems, technologies, Cloud platforms (MS Azure)
Understanding of networking protocols, TCP/IP, LAN, WAN and Internet network infrastructure
Knowledge of Windows and Unix based systems
Analytical thinking
Good time management and communication skills
Fluent English both spoken and written
**Nice to have**:
OWASP
OSCP certification
Join our EmbedIT family and enjoy
Motivating yearly bonus
5 weeks of paid vacation
5 days of Personal time off
Meal allowances
Contribution to the pension scheme
Massages and yoga lessons
Complimentary tea, subsidized coffee, and free fruit on Mondays and Wednesdays
Relax room & games room
Attendance at local & foreign conferences
Soft skills and managerial training
Possible internal growth
Loyalty and referral bonuses

Zajímavé nabídky práce v okolí: