W skrócie
- Zadania: Zidentyfikuj i priorytetyzuj zagrożenia w obszarze cyberbezpieczeństwa.
- Firma: Dynamiczna firma zajmująca się bezpieczeństwem IT z innowacyjnym podejściem.
- Benefity: Atrakcyjne wynagrodzenie, elastyczne godziny pracy i możliwości rozwoju zawodowego.
- Pozostałe informacje: Możliwość pracy w zespole ekspertów w dynamicznym środowisku.
- Dlaczego ta praca: Pracuj nad realnymi zagrożeniami i wpływaj na bezpieczeństwo cyfrowe.
- Kwalifikacje: Znajomość zarządzania lukami i podstawowych zasad cyberbezpieczeństwa.
Przewidywane wynagrodzenie mieści się w przedziale 81000 - 99000 zł za rok.
I'm looking for a Cyber Security Consultant with a solid understanding of vulnerability management and general cybersecurity concepts.
The ideal candidate should possess practical knowledge of vulnerability assessment processes, common security terminology, and basic IT infrastructure components.
Cyber Security Fundamentals Understanding of cybersecurity principles and common threat landscape.
Ability to explain what a security vulnerability is and understand its business and technical impact.
Familiarity with vulnerability severity classification and prioritization methodologies.
Knowledge of CVSS (Common Vulnerability Scoring System) and how vulnerability scores are used for risk assessment.
Understanding of vulnerability remediation processes and risk reduction practices.
Vulnerability Management Experience with vulnerability scanning and assessment tools such as Qualys, Tenable Nessus, Rapid7, Open VAS, or similar solutions.
Understanding of how vulnerability scanners work, their capabilities, limitations, and typical use cases.
Ability to identify, investigate, and research vulnerabilities using public sources such as CVE databases, NVD, vendor advisories, and security bulletins.
Knowledge of vulnerability prioritization based on severity, exploitability, asset criticality, and business impact.
AI Security Awareness Basic understanding of security risks associated with AI systems, AI agents, Large Language Models (LLMs), and AI-enabled applications.
Awareness of AI-related vulnerabilities, including prompt injection, data leakage, excessive permissions, insecure integrations, and risks associated with autonomous AI agents.
General understanding of computer networking concepts, including TCP/IP, DNS, DHCP, routing, firewalls, proxies, and network segmentation.
Ability to troubleshoot basic network connectivity and communication issues.
Operating Systems Good understanding of Microsoft Windows and Linux operating systems.
Familiarity with system administration fundamentals and security best practices.
Ability to navigate and perform basic administrative tasks on both platforms.
Command Line Skills Knowledge of common Linux commands (e. g., grep, find, ps, netstat/ss, chmod, chown, journalctl, systemctl).
Basic Power Shell knowledge, including execution of administrative and information-gathering commands.
Ability to analyze logs and collect basic troubleshooting information from operating systems.
Must-have knowledge and experience Understanding of cybersecurity principles and common threat landscape.
Ability to explain what a security vulnerability is and understand its business and technical impact.
Familiarity with vulnerability severity classification and prioritization methodologies.
Knowledge of CVSS (Common Vulnerability Scoring System) and how vulnerability scores are used for risk assessment.
Understanding of vulnerability remediation processes and risk reduction practices.
Experience with vulnerability scanning and assessment tools such as Qualys, Tenable Nessus, Rapid7, Open VAS, or similar solutions.
Understanding of how vulnerability scanners work, their capabilities, limitations, and typical use cases.
Ability to identify, investigate, and research vulnerabilities using public sources such as CVE databases, NVD, vendor advisories, and security bulletins.
Knowledge of vulnerability prioritization based on severity, exploitability, asset criticality, and business impact.
Good understanding of Microsoft Windows and Linux operating systems.
Knowledge of common Linux commands (e. g., grep, find, ps, netstat/ss, chmod, chown, journalctl, systemctl).
Basic Power Shell knowledge, including execution of administrative and information-gathering commands.
Ability to analyze logs and collect basic troubleshooting information from operating systems.
Nice-to-have knowledge and experience Experience working in security operations, vulnerability management, risk management, or infrastructure support teams.
Familiarity with security frameworks and standards such as NIST, CIS Controls, ISO 27001, or OWASP.
Security certifications such as Comp TIA Security+, Comp TIA Cy SA+, SC-900, AZ-500, or similar.
#J-18808-Ljbffr
Threat Identification & Prioritization in Warsaw – pracodawca: b2bnetwork
Nasza firma to doskonały pracodawca, który oferuje wyjątkowe możliwości rozwoju zawodowego w dynamicznym środowisku technologicznym. Pracując jako Cloud IT Architect, będziesz częścią zespołu, który kładzie duży nacisk na innowacje i współpracę, a także korzysta z najnowszych technologii chmurowych w sektorze finansowym. Oferujemy elastyczne godziny pracy, programy rozwoju umiejętności oraz przyjazną atmosferę, co sprawia, że jesteśmy idealnym miejscem dla profesjonalistów szukających satysfakcjonującej kariery.
