IT Vulnerabilities Management Engineer

We are looking for you, if you:

• have 3+ experience with patch management solutions (i.e. Satellite, SCCM, BigFix),
• have good practical knowledge in at least one operating system (Linux, MS),
• have understanding of DevOps practices including Git, CI/CD, monitoring,
• are eager to learn more and proactively acquire knowledge,
• have curious and analytical mindset,
• prefer “teamwork approach” rather than “one-man army approach”,
• English level: B2.

You'll get extra points for:

• having experience in cyber-security related role,
• have knowledge about vulnerabilities (i.e. OWASP top 10),
• ability to solve complex problems and their correlation, draw conclusions and propose corrective actions/improvements,
• IT security related certification (like: CompTIA CySA+, CompTia Security+, CEH, CHFI, CISSP),
• IT related certification (like: RHCSA, MCSA, CCNA).

Your responsibilities:

• Look out for entry points (attacker perspective) in reported findings,

• Support DevOps teams with solving discovered vulnerabilities,

• Security content development and maintenance,

• Implementation of IT security solutions,

• Reporting and documentation.

Information about the team:

As Vulnerability Management Response Team we make sure that discovered vulnerabilities are properly managed and solved before leverage by malicious activity. Our ambition is to eliminate weakest points which can be exploited. We support ING from global perspective.

At ING Hubs Poland we follow the Agile approach, using flexible frameworks like Scrum and Kanban at our everyday work.

We are innovative and we trust people we work with. The broad autonomy our employees have, stimulates motivation and creativity what allows us to adapt to the changing requirements of business partners.

The role naming convention in the global ING job architecture will be “Engineer II”.