Devoteam Cyber Trust | Vulnerability Analyst | Telecom Sector

Job Description

We are looking for a Security Operations / Vulnerability Management Specialist to join our Information Security team. The role will focus on vulnerability management, security event monitoring, compliance assessments, and supporting the prevention of security incidents.

The successful candidate will have a strong operational mindset and will work closely with IT and Infrastructure teams to ensure vulnerabilities are properly assessed, communicated, remediated, and validated.

Key Responsibilities

• Manage the full vulnerability lifecycle, from identification and assessment through communication, remediation tracking, and validation.

• Use Vulnerability Management and Security Scanning tools, with a strong focus on Qualys.

• Monitor and analyse security events across infrastructure, applications, and communication networks.

• Identify and assess potential security risks and deviations, contributing to the prevention of security incidents.

• Perform security compliance assessments and Information Security audits across the company's technology environment.

• Analyse security data and provide relevant insights to support risk assessment and remediation activities.

• Work closely with IT, Infrastructure, and other technical teams to coordinate and follow up on vulnerability remediation.

• Track remediation plans, ensuring agreed timelines are met and remediation actions are properly validated.

• Support the operation and availability of security monitoring platforms and tools.

• Contribute to the continuous improvement of vulnerability management, security monitoring, and incident prevention processes.

 

 

Qualifications

• Proven hands-on experience with Qualys, particularly Vulnerability Management and Scanning.

• Knowledge of security monitoring, event analysis, and technical compliance.

• Good understanding of vulnerability management and Information Security concepts and processes.

• Strong analytical and critical-thinking skills, with the ability to interpret security data and identify potential risks.

• Ability to collaborate effectively with IT and Infrastructure teams to drive vulnerability remediation.

• Strong sense of ownership, attention to detail, and technical rigor.

• Proactive mindset with a strong focus on security prevention and risk reduction.

• Good communication and stakeholder management skills.

What We Are Looking For

• A hands-on security professional with a strong focus on Vulnerability Management and Security Operations.

• Someone comfortable working across technical teams and following vulnerabilities through to resolution.

• A structured, analytical, and proactive professional with a strong sense of responsibility and attention to detail.

Additional Information

What we offer:

• Professional development and monitoring talent;
• Commitment to our employees' development;
• Collaboration in a company that is constantly growing and evolving;
• Strong organizational culture: collaboration, sharing, flexibility, integrity and low ego.

The Devoteam Group works for equal opportunities, promoting its employees based on merit and actively fights against all forms of discrimination. We are convinced that diversity contributes to the creativity, dynamism and excellence of our organization. All of our vacancies are open to people with disabilities.

Company Description

Devoteam Cyber Trust is the specialized cybersecurity unit of the Devoteam Group. With over 800 experts across the EMEA region, our mission is to position cybersecurity as a business enabler, not a barrier. We take a comprehensive approach to Cyber Resilience, Applied Security, and Security Service Management to safeguard the digital journey of large and mid-sized enterprises across all sectors and industries.

Since 2009, previously known as INTEGRITY, our Portugal-based team has specialized in delivering cutting-edge Managed Security Services. By combining expertise with proprietary technology, we consistently and effectively reduce our clients' cyber risk. Our wide range of services includes Persistent Penetration Testing, ISO 27001, PCI-DSS, GRC Consulting and Solutions, and Third-Party Risk Management. Certified in ISO 27001 (Information Security) and ISO 9001 (Quality), PCI-QSA, and members of CREST and CIS (Center for Internet Security), we serve a significant number of clients in over 20 countries.