Fincons Group

Global IT consulting and systems integration

Cybersecurity Vulnerability Analyst

Offensive Security & TestingPosted on Nov 10

Full-timeWarsaw, PolandNo salary listed

About the Job

Requirements

Extensive experience in vulnerability analysis, risk assessment, and vulnerability management within complex ICT environments.
Proven expertise in coordinating and executing penetration tests, including assessment of web application vulnerabilities and common exploit techniques.
Strong knowledge of system vulnerabilities, threat landscapes, exploit mechanisms, and remediation methodologies.
Hands-on experience with security tools including Tenable, Nmap, Wireshark, Burp Suite, web application firewalls, endpoint detection and response platforms, and vulnerability management solutions.
Solid understanding of operating system, network, infrastructure, and application security, as well as security controls and cybersecurity frameworks.
Expertise in secure software development practices, secure coding standards, and OWASP best practices.
Ability to design, perform, and analyze security assessments, vulnerability scans, and technical compliance reviews.
Experience producing security reports, vulnerability assessments, patch management documentation, and remediation recommendations.
Skill in reviewing existing security controls, developing security policies and procedures, and promoting information protection and data privacy.
At least two certifications from the listed GIAC, (ISC)2, EC-Council, or SABSA certifications, or internationally recognized equivalent alternative certifications.
Bachelor's degree and five years of experience.
English language proficiency at B2 level.

Responsibilities

Monitor, assess, and analyze hardware and software vulnerabilities, including their impact and remediation strategies.
Conduct vulnerability assessments, penetration testing, and regular vulnerability scanning of systems and applications.
Manage the vulnerability lifecycle, including triage, prioritization, tracking, and remediation follow-up.
Validate and investigate vulnerabilities through technical analysis, testing, source code review, and exploitation verification.
Review security compliance against defined security baselines and recommend corrective actions.
Evaluate security audit findings and implement remediation controls to reduce security risks.
Assess security controls of new applications and systems to ensure compliance and secure configurations.
Coordinate vulnerability response activities with vendors, CSIRTs, technical experts, and internal stakeholders.
Perform forensic analysis and support investigations related to information security incidents.
Produce security reports, KPI dashboards, and management updates to monitor compliance, remediation progress, service quality, and SLA achievement.
Document, report, present, and communicate with various stakeholders.
Develop code, scripts, and programs.
Identify and exploit vulnerabilities; conduct ethical hacking; and use penetration testing tools effectively.
Conduct technical analysis and reporting, and decompose and analyze systems to identify weaknesses and ineffective controls.
Review code, assess its security, and integrate cybersecurity solutions into the organization's infrastructure.
Configure solutions according to the organization's security policy, assess their security and performance, and develop and test secure code or scripts.
Identify, troubleshoot, and solve cybersecurity-related issues.

Desired Qualifications

CISSP certification is considered an asset.

Fincons Group is an IT business consulting company that has been designing the digital future of leading companies on international markets for 40 years. Fincons Group built its reputation on foreseeing and interpreting new business models and the rapid evolution of IT systems by building a complete range of services: from research and consulting to design and development, from system integration of leading vendor software solutions right up to application management, supporting clients step by step along their digital transformation journey. Fincons is a multinational with over 2,600 people and several offices worldwide (in Italy, Switzerland, Germany, France, the United Kingdom, Belgium and the USA), but above all a Family Company where the founders play a strategic role with commitment and passion, grounding the company in the same principles of a united and caring family.
We firmly believe in the value of cooperation and in the contribution that every idea and intuition can bring. We believe that everyone’s effort can make a difference. Transforming knowledge into a strategic resource is our company mission, and we pursue it with the help of our most strategic asset: our people.

To support our customer, we are looking for a:

Cybersecurity Vulnerability Analyst- STANDARD

TASKS:

Monitor, assess, and analyse hardware/software vulnerabilities, including their impact and remediation strategies.
Conduct vulnerability assessments, penetration testing, and regular vulnerability scanning of systems and applications.
Manage the vulnerability lifecycle, including triage, prioritisation, tracking, and remediation follow-up.
Validate and investigate vulnerabilities through technical analysis, testing, source code review, and exploitation verification.
Review security compliance against defined security baselines and recommend corrective actions.
Evaluate security audit findings and implement remediation controls to reduce security risks.
Assess security controls of new applications and systems to ensure compliance and secure configurations.
Coordinate vulnerability response activities with vendors, CSIRTs, technical experts, and internal stakeholders.
Perform forensic analysis and support investigations related to information security incidents.
Produce security reports, KPI dashboards, and management updates to monitor compliance, remediation progress, service quality, and SLA achievement.

REQUIREMENTS:

Extensive experience in vulnerability analysis, risk assessment, and vulnerability management within complex ICT environments.
Proven expertise in coordinating and executing penetration tests, including the assessment of web application vulnerabilities and common exploit techniques.
Strong knowledge of system vulnerabilities, threat landscapes, exploit mechanisms, and remediation methodologies.
Hands-on experience with industry-leading security tools, including Tenable, Nmap, Wireshark, Burp Suite, WAFs, EDR platforms, and vulnerability management solutions.
Solid understanding of operating system, network, infrastructure, and application security, as well as security controls and cybersecurity frameworks.
Expertise in secure software development practices (SDLC), secure coding standards, and OWASP best practices.
Proven ability to design, perform, and analyse security assessments, vulnerability scans, and technical compliance reviews.
Experience in producing high-quality security reports, vulnerability assessments, patch management documentation, and remediation recommendations.
Skilled in reviewing existing security controls, developing security policies and procedures, and promoting information protection and data privacy.
Strong analytical, problem-solving, and communication skills, with an innovative approach to emerging technologies; CISSP certification is considered an asset.

CERTIFICATIONS:
At least 2 certifications among:

GCED (GIAC Certified Entreprise Defender)
GPPA (GIAC Certified Perimeter Protection Analyst)
GCWN (GIAC Certified Windows Security Administrator)
GCUX (GIAC Certified UNIX Security Administrator)
GCCC (GIAC Certified Critical Controls)
SSCP ((ISC)2 Certified Systems Security Practitioner)
GCWN (GIAC Certified Windows Security Administrator)
GCUX (GIAC Certified UNIX Security Administrator)
GCCC (GIAC Certified Critical Controls)
GPEN (GIAC Certified Penetration Tester)
GXPN (GIAC Certified Exploit Researcher and Advanced Penetration Tester)
GMOB (GIAC Certified Mobile Device Security Analyst)
NDS (EC-Council Certified Security and Vulnerability Assessor)
ECSA (EC-Council Certified Security Analyst)
GSNA (GIAC Certified Systems and Network Auditor)
GSEC (GIAC Certified Security Essentials)
ECSA (EC-Council Certified Security Analyst)
SCPO (SABSA Certified Security Operations & Service Management Practitioner)
ECSA (EC-Council Certified Security Analyst)

or for any listed above, an equivalent alternative certification recognized internationally.

SKILLS:

Document, report present and communicate with various stakeholders
Develop codes, scripts and programmes
Identify and exploit vulnerabilities
Conduct ethical hacking
Think creatively and outside the box
Identify and solve cybersecurity-related issues
Communicate, present and report to relevant stakeholders
Use penetration testing tools effectively
Conduct technical analysis and reporting
Decompose and analyse systems to identify weaknesses and ineffective controls
Review codes assess their security integrate cybersecurity solutions to the organisation’s infrastructure
Configure solutions according to the organisation’s security policy
Assess the security and performance of solutions
Develop and test secure code and/or scripts
Identify and troubleshoot cybersecurity-related issues

Language knowledge: English B2

Office: Warsaw, Poland. Regular on-site presence (5/5)
Minimum level of qualification: Bachelor’s degree and 5 years of experience.

If interested, please apply!

Our personnel search is addressed to candidates of all genders.

The data will be processed and stored exclusively for the purposes of this or future selections, in compliance with the Federal Data Protection Law (LPD) and guaranteeing the rights referred to in art. 13 Legislative Decree 196/03 and EU regulation 679/2016 (GDPR)
#LI-CG1

About the Company

Fincons Group

Global IT consulting and systems integration

Fincons Group provides IT consulting, system integration, and digital transformation services to help organizations manage technology changes. It delivers programs through a global delivery model, including the Bari Delivery Center and a Smart-Shore approach that blends nearshore Europe with offshore teams, and expanded to the US after acquiring PDG Consulting in 2024. It differentiates itself with four decades of organic growth under family leadership, deep client relationships, and deliberate international expansion built on technical skill. Its goal is to become a leading global IT consulting group by extending its geographic footprint and capabilities to help clients across industries implement technology-driven change.

Company size: 1,001-5,000
Company stage: Not listed
Total funding: Not listed
Headquarters: Milan, Italy
Founded: 1983

Recently Posted Jobs

Explore more opportunities at Fincons Group

See more jobs