Cybersecurity Vulnerability Analyst- STANDARD

Fincons Group is an IT business consulting company that has been designing the digital future of leading companies on international markets for 40 years. Fincons Group built its reputation on foreseeing and interpreting new business models and the rapid evolution of IT systems by building a complete range of services: from research and consulting to design and development, from system integration of leading vendor software solutions right up to application management, supporting clients step by step along their digital transformation journey. Fincons is a multinational with over 2,600 people and several offices worldwide (in Italy, Switzerland, Germany, France, the United Kingdom, Belgium and the USA), but above all a Family Company where the founders play a strategic role with commitment and passion, grounding the company in the same principles of a united and caring family.
We firmly believe in the value of cooperation and in the contribution that every idea and intuition can bring. We believe that everyone’s effort can make a difference. Transforming knowledge into a strategic resource is our company mission, and we pursue it with the help of our most strategic asset: our people.

To support our customer, we are looking for a:

Cybersecurity Vulnerability Analyst- STANDARD

TASKS:
- Monitor, assess, and analyse hardware/software vulnerabilities, including their impact and remediation strategies.
- Conduct vulnerability assessments, penetration testing, and regular vulnerability scanning of systems and applications.
- Manage the vulnerability lifecycle, including triage, prioritisation, tracking, and remediation follow-up.
- Validate and investigate vulnerabilities through technical analysis, testing, source code review, and exploitation verification.
- Review security compliance against defined security baselines and recommend corrective actions.
- Evaluate security audit findings and implement remediation controls to reduce security risks.
- Assess security controls of new applications and systems to ensure compliance and secure configurations.
- Coordinate vulnerability response activities with vendors, CSIRTs, technical experts, and internal stakeholders.
- Perform forensic analysis and support investigations related to information security incidents.
- Produce security reports, KPI dashboards, and management updates to monitor compliance, remediation progress, service quality, and SLA achievement.

REQUIREMENTS:
- Extensive experience in vulnerability analysis , risk assessment, and vulnerability management within complex ICT environments.
- Proven expertise in coordinating and executing penetration tests , including the assessment of web application vulnerabilities and common exploit techniques.
- Strong knowledge of system vulnerabilities, threat landscapes, exploit mechanisms, and remediation methodologies .
- Hands-on experience with industry-leading security tools, including Tenable, Nmap, Wireshark, Burp Suite, WAFs, EDR platforms, and vulnerability management solutions .
- Solid understanding of operating system, network, infrastructure, and application security , as well as security controls and cybersecurity frameworks.
- Expertise in secure software development practices (SDLC) , secure coding standards, and OWASP best practices.
- Proven ability to design, perform, and analyse security assessments, vulnerability scans, and technical compliance reviews .
- Experience in producing high-quality security reports , vulnerability assessments, patch management documentation, and remediation recommendations.
- Skilled in reviewing existing security controls, developing security policies and procedures, and promoting information protection and data privacy.
- Strong analytical, problem-solving, and communication skills, with an innovative approach to emerging technologies; CISSP certification is considered an asset.

CERTIFICATIONS:
At least 2 certifications among:
- GCED (GIAC Certified Entreprise Defender)
- GPPA (GIAC Certified Perimeter Protection Analyst)
- GCWN (GIAC Certified Windows Security Administrator)
- GCUX (GIAC Certified UNIX Security Administrator)
- GCCC (GIAC Certified Critical Controls)
- SSCP ((ISC)2 Certified Systems Security Practitioner)
- GCWN (GIAC Certified Windows Security Administrator)
- GCUX (GIAC Certified UNIX Security Administrator)
- GCCC (GIAC Certified Critical Controls)
- GPEN (GIAC Certified Penetration Tester)
- GXPN (GIAC Certified Exploit Researcher and Advanced Penetration Tester)
- GMOB (GIAC Certified Mobile Device Security Analyst)
- NDS (EC-Council Certified Security and Vulnerability Assessor)
- ECSA (EC-Council Certified Security Analyst)
- GSNA (GIAC Certified Systems and Network Auditor)
- GSEC (GIAC Certified Security Essentials)
- ECSA (EC-Council Certified Security Analyst)
- SCPO (SABSA Certified Security Operations & Service Management Practitioner)
- ECSA (EC-Council Certified Security Analyst)

or for any listed above, an equivalent alternative certification recognized internationally .

SKILLS:
- Document, report present and communicate with various stakeholders
- Develop codes, scripts and programmes
- Identify and exploit vulnerabilities
- Conduct ethical hacking
- Think creatively and outside the box
- Identify and solve cybersecurity-related issues
- Communicate, present and report to relevant stakeholders
- Use penetration testing tools effectively
- Conduct technical analysis and reporting
- Decompose and analyse systems to identify weaknesses and ineffective controls
- Review codes assess their security integrate cybersecurity solutions to the organisation’s infrastructure
- Configure solutions according to the organisation’s security policy
- Assess the security and performance of solutions
- Develop and test secure code and/or scripts
- Identify and troubleshoot cybersecurity-related issues
 
Language knowledge: English B2

Office: Warsaw, Poland. Regular on-site presence (5/5)
Minimum level of qualification:   Bachelor’s degree and 5 years of experience.

If interested, please apply!

Our personnel search is addressed to candidates of all genders.

The data will be processed and stored exclusively for the purposes of this or future selections, in compliance with the Federal Data Protection Law (LPD) and guaranteeing the rights referred to in art. 13 Legislative Decree 196/03 and EU regulation 679/2016 (GDPR)
#LI-CG1