We are currently looking for a Security Remediation Expert to join the team of our client, a large Nordic bank, and help reduce its security risk exposure. You will lead the identification of remediation gaps, analyze complex scanning results and advise stakeholders on remediation strategies in line with security best practices and regulatory expectations.
For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.
Your responsibilities
Lead the identification of remediation gaps and drive strategic resolution initiatives across the organization.
Provide expert guidance to stakeholders on remediation strategies, ensuring alignment with security best practices and regulatory expectations.
Analyze complex scanning results and define actionable steps that reduce the bank's risk exposure.
Collaborate cross-functionally with accountable and responsible remediation owners to ensure timely and effective execution.
Ensure security findings are clearly understood and that remediation progresses at an appropriate pace.
Take ownership of your tasks, maintain a proactive governance approach and influence remediation outcomes.
Contribute to the design of risk scoring that enables near real-time, risk-based prioritization and faster remediation of critical vulnerabilities.
Our requirements
3+ years of hands-on experience in security domains, specifically in security findings assessment and remediation.
Expert-level knowledge of vulnerability scoring frameworks, security risk assessment methodologies, and the governance processes used to determine severity, prioritization and remediation timelines.
Deep understanding of modern AI threats and their impact on the security posture.
Knowledge and experience in problem management, Secure DevOps, DORA and OWASP.
Advanced troubleshooting and conceptual skills, with the ability to find solutions to uncommon remediation problems.
Ability to interpret and communicate results using exploratory data analysis and statistical modeling techniques.
Good understanding of risk-based approaches and risk management.
Experience in cross-organizational collaboration and negotiation.
Ability to prepare and deliver presentations to stakeholders on remediation progress, risks and strategic recommendations.
Demonstrated experience in automation, preferably using Python, Apache Airflow and/or Power Automate.
Practical application of AI technologies in governance processes and automation workflows.
Ability to mentor team members and share knowledge across the security function.
Fluent business and technical English (written and spoken).
Optional
Previous experience working in the banking or financial sector.
Benefits
remote work opportunities
integration events
Interested? Apply now and help a leading Nordic bank stay ahead of security risks!
OPTIVEUM SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄ
Optiveum is acting as a sourcing partner for this role. You will be signing a cooperation agreement directly with our partner—a renowned IT contracting company with nearly 20 years of presence on the market.
The end client operates in the international public, defense, or government administration sector, leading large-scale, multi-million euro digital transformation projects.
... enables near real-time, risk-based prioritisation and faster remediation of critical vulnerabilities Our requirements - 3+ years of hands-on experience in security domains, especially security findings assessment and remediation - Expert-level knowledge of vulnerability scoring frameworks, security risk assessment methodologies ...
... enables near real-time, risk-based prioritisation and faster remediation of critical vulnerabilities Our requirements - 3+ years of hands-on experience in security domains, especially security findings assessment and remediation - Expert-level knowledge of vulnerability scoring frameworks, security risk assessment methodologies ...
... hands-on experience, Deep understanding of modern AI threats and their impact on security posture, Expert-level knowledge of vulnerability scoring frameworks, security risk assessment methodologies, and governance processes used to determine severity, prioritization, and remediation timelines for security findings, Governance ...
... to streamline processes and reduce recurrence., Track remediation performance metrics and support continuous process improvements., Collaborate closely with security and platform teams to improve scan quality, reduce false positives, and optimize vulnerability lifecycle management. At least 3 years of hands-on experience ...
... to streamline processes and reduce recurrence., Track remediation performance metrics and support continuous process improvements., Collaborate closely with security and platform teams to improve scan quality, reduce false positives, and optimize vulnerability lifecycle management. At least 3 years of hands-on experience ...
... praktycznego doświadczenia w Cyber Security, szczególnie w obszarze oceny security findings i remediation. - Ekspercka znajomość vulnerability management oraz vulnerability scoring frameworks. - Bardzo dobra znajomość metod security risk assessment, priorytetyzacji ryzyka oraz procesów governance związanych z remediation. - ...
... Samodzielność, analityczne myślenie i umiejętność współpracy między zespołami. Mile widziane - Znajomość modułów Qualys, m.in. VMDR, Policy Compliance, WAS i Container Security - Doświadczenie w automatyzacji z wykorzystaniem API i skryptów - Znajomość CIS Benchmarks i zasad hardeningu. - Znajomość standardów i regulacji, takich jak ...
... Samodzielność, analityczne myślenie i umiejętność współpracy między zespołami. Mile widziane, Znajomość modułów Qualys, m.in. VMDR, Policy Compliance, WAS i Container Security, Doświadczenie w automatyzacji z wykorzystaniem API i skryptów, Znajomość CIS Benchmarks i zasad hardeningu., Znajomość standardów i regulacji, takich jak ISO ...
... written Nice to have: - Experience working in security operations, vulnerability management, risk management, or infrastructure support teams - Familiarity with security frameworks and standards such as NIST, CIS Controls, ISO 27001, or OWASP - Security certifications such as CompTIA Security+, CompTIA CySA+, SC-900, AZ-500, ...
Your responsibilities - Support development teams in integrating security into the SDLC and applying secure coding practices - Perform and support security assessments using AppSec tools, analyse findings, prioritise risks and guide teams through vulnerability remediation - Work with SAST, DAST, SCA and other security testing ...