20 years on the Romanian IT market and still growing.Part of the HN Services Group, with offices in France, Spain, Portugal, and Luxembourg, HN Services Romania is about building real careers, not just filling roles.What you’ll find here:Digital transformation projects with real impactA wide range of technical roles across modern and legacy technologies (yes, COBOL is still very much alive)Exposure to diverse industries and international environmentsContinuous growth through our in-house software development training center (HN Training Institute)💡We are currently looking for experienced professionals to deliver high-quality, stable, and resilient software solutions.🔍 RESPONSIBILITIESManage the end-to-end vulnerability and technical non-compliance management process, from vulnerability scan preparation and execution to results presentation and security reportingEnsure compliance with security standards through the preparation, execution, and analysis of vulnerability scansIdentify security vulnerabilities and present detected vulnerabilities, including newly identified issues and those approaching remediation deadlinesCoordinate and follow up on vulnerability remediation with the relevant technical teams and stakeholders across different TribesReview and validate security configurations and security patches implemented by technical teamsProduce, publish, and monitor operational security indicators and reportsCollaborate closely with Security & Governance teamsDesign and develop new security solutionsMonitor changes in security standards and requirements issued by the Group and/or BGL CISO, identify gaps, and propose convergence/remediation plansIdentify and plan required technology upgrades, lifecycle management activities, and security patching for vulnerability and compliance scanning toolsEnsure comprehensive vulnerability scanning coverage across all assets and technologiesMonitor security compliance using tools such as PingCastleMaintain vulnerability scanning tools in operational condition, including production incident management, lifecycle management, and security patchingCreate and maintain operational documentation, procedures, guides, and supporting documentationImplement remediation measures to address scanning coverage gaps across On-Premise, DMZR, and IT Cloud environmentsConduct technical studies and Proofs of Concept (PoCs) to validate technological changes and improvementsAct as a central point of contact for vulnerability remediation activitiesIdentify remediation owners, communicate remediation recommendations and expected SLAs, and maintain formal action plans covering owners, actions, deadlines, and progressIdentify remediation risks and escalate deviations as early as possibleLiaise with IT Risk Management teams regarding exception requests and assess their security impactPromote security best practices and support relevant teams through guidance and training🛠️REQUIREMENTSStrong knowledge of vulnerability management and technical complianceHands-on experience with Qualys and Tanium, including Vuln/CC, SelfAssessment, API and Comply modulesExperience with ELK Stack, Power BI, and Power QueryKnowledge of cybersecurity frameworks and standards:NIST / CIS BenchmarkOWASPPTESISSAFOSSTMMISO 27001Experience working with Linux and Windows environmentsKnowledge of Cloud environmentsScripting skills in Python, PowerShell, and RegexStrong understanding and ability to perform detailed analysis of standard network protocolsAbility to manage projects and develop/adapt processesAbility to understand, explain, and drive changeExperience working with Agile methodologiesStrong collaboration and teamwork skillsGood organizational skills, attention to detail, and rigorProactive approach, adaptability, curiosity, and willingness to learnStrong written and verbal communication skillsFluent FrenchGood written and spoken English📍 Location & SetupHybrid (2 days per week in the office)Only eligible candidates will be contacted for further information and start of the recruitment process. Show more Show less