Engineer - Cybersecurity (Vulnerability & Threat Management) w Kraków, Polska

Expected, Nessus, Nexpose, Metasploit, Unix, Cisco, Python, Perl, Ruby, Java, .NET

Operating system, Windows, Linux

About the project, Duties will include providing vulnerability assessment and remediation activities through a comprehensive testing process, as well as identifying weaknesses and vulnerabilities within the systems and proposing countermeasures. Typical assignments will involve testing of the overall security of critical infrastructure components and applications to ensure they comply with internal policies, security architecture best practices, and industry standards; scanning and discovering rouge hosts, networks, and devices; and scanning and discovering vulnerable systems and applications., , Working Hours: 9 am – 5 pm local time

This is how we work, agile

Your responsibilities, Plans, develops and executes scans for vulnerabilities and compliance with configuration standards, Manages enterprise vulnerability assessment and configuration assessment tools, Works to identify and resolve false positive findings in assessment results, Analyzes threat and vulnerability feeds and analyzes data for applicability to Sysco’s environment, Works with applicable technical teams to ensure remediation of discovered vulnerabilities, Coordinates change control for remediation activities, Responsible for generating timely vulnerability assessment reports to management, Generate reports on assessment findings and summarizes to facilitate remediation tasks for other operational teams, Produces vulnerability, configuration, and coverage metrics to demonstrate assessment coverage and remediation effectiveness, Recommends security controls and/or corrective actions for mitigating technical and business risk, Assists in conducting security reviews of new and existing applications, Maintains an awareness of existing and proposed security standards, industry best practices, legislation and regulations pertaining to information security and recommends appropriate changes, Prevents/anticipates problems and focus on continuous improvement of manual and automated processes, Optimizes existing workflows to enhance existing capabilities, Creates and updates documentation related to assessment processes

Candidates for this position should have at least 2 years of experience of the following:, Conducting vulnerability assessments and penetration testing (application and/or infrastructure) and articulating security issues to technical and non-technical audience, Identifying, researching, validating, and exploiting various different known and unknown security vulnerabilities on server and client side, Vulnerability Assessment tools, e.g. Nessus, Nexpose, etc, Exploitation frameworks, e.g. Metasploit, Social Engineering campaigns, e.g. email phishing, phone calls, SET, Security devices, e.g. Firewalls, VPN, Proxies, OS Security, e.g. Unix, Linux, Windows, Cisco, etc, Understanding of common protocols, e.g. LDAP, SMTP, DNS, Routing Protocols, Web application infrastructure, e.g. Application Servers, Web Servers, Databases, Web development and programming languages i.e. Python, Perl, Ruby, Java, and/or .Net, Reporting information security vulnerabilities to businesses, Knowledge of tools and processes used to expose known and undocumented vulnerabilities in various different systems., Subject matter expert in a broad range of security concepts, Broad IT knowledge and experience, including an understanding of network devices and their role in a secure environment, Ability to work directly with team members and end-users in stressful situations, Ability to work in a dynamic environment, Ability to solve complex problems through research and technical detective work, Ability to learn new technologies and processes quickly, Ability to quickly adapt to changes in timelines and sequences, Able to work off hours when required, Excellent communication and interpersonal skills, Collaboration skills

What we offer, Private medical care, Hybrid working, Work From Home Allowance to support remote working expenses, Cafeteria platform, MultiSport card, Life insurance, Free coffee and tea, Integration events, Parking spaces, Sponsorship for professional certifications and conferences, Modern office with facilities such as Xbox and foosball table

Recruitment stages, Initial recruiter screening, Hiring Manager/Team interview, Technical/Behavioral interview, Final offer

1.A recruiter will review your application and have an initial conversation with you., , https://jobeax.com/link/zL4sQFKo2onLeI4h will meet with the Hiring Manager and/or team to discuss the role and your experience., , https://jobeax.com/link/tIMcG5pPCQi7jiO3 will meet with the relevant leads to discuss your technical expertise and behavioral, competencies., , https://jobeax.com/link/UzgPYMivVVQ5ZaN2 successful, we will discuss the final offer and next steps with you.

SYSCO SERVICE CENTRE POLAND SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ, Sysco is the global leader in selling, marketing and distributing food products to restaurants, healthcare and educational facilities, lodging establishments and other customers who prepare meals away from home. Its family of products also includes equipment and supplies for the foodservice and hospitality industries. With more than 71,000 colleagues, the company operates 333 distribution facilities worldwide and serves approximately 700,000 customer locations. For fiscal year 2022 that ended July 2, 2022, the company generated sales of more than $68 billion. Information about our Sustainability program, including Sysco’s 2022 Sustainability Report and 2022 Diversity, Equity & Inclusion Report, can be found at

This is how we work,