Vulnerability Management Engineer

About the role

ING Hubs Poland is hiring a Vulnerability Management Engineer for its Vulnerability Management Response Team, which manages and remediates vulnerabilities before they can be exploited. The team works from a global perspective with stakeholders across the organisation, using Agile methods such as Scrum and Kanban. The role is named "Engineer II" in the global ING job architecture.

Key responsibilities

• Manage follow-up cases for vulnerability scanning, penetration testing, secret scanning, Red Team exercises and security baseline validation findings
• Identify and challenge ownership of findings and coordinate remediation across stakeholders
• Drive overdue findings toward remediation, mitigation or formal risk registration
• Perform root cause analysis and identify systemic issues behind recurring findings
• Design and maintain management reporting, KPIs and Power BI dashboards
• Recommend and implement process improvements to reduce recurring vulnerabilities
• Prepare executive-level reports and present security risk insights to stakeholders

Required profile

• At least 3 years of proven experience in vulnerability management, security testing or cybersecurity operations
• Strong understanding of risk management, vulnerability prioritisation and remediation governance
• Ability to combine business context, asset criticality, severity and timelines into risk-based decisions
• Excellent stakeholder management, communication and coordination skills
• Continuous improvement mindset and problem-solving ability

Required skills

• Advanced Power BI knowledge, including Power Query, data modelling, DAX, KPI development and dashboard design
• Advanced analytical and data interpretation skills
• Knowledge of common vulnerabilities (e.g. OWASP Top 10) is an advantage
• IT security certifications (CompTIA CySA+, CompTIA Security+, CEH, CHFI, CISSP) or IT certifications (RHCSA, MCSA, CCNA) are an advantage