Expert Cyber Security Consultant (f/m)

We are looking for an experienced Cyber Security Consultant to join a security function focused on vulnerability management, remediation governance, and risk-based prioritization.

The role combines hands-on security expertise with strategic ownership. You will work across the organization to identify remediation gaps, assess security findings, improve vulnerability prioritization, and drive effective risk reduction.

Your responsibilities

• Lead the identification of remediation gaps and drive strategic resolution initiatives across the organization.

• Provide expert guidance on vulnerability remediation strategies, security best practices, and regulatory expectations.

• Analyze complex vulnerability scanning results and translate them into actionable remediation plans.

• Work closely with remediation owners and other stakeholders to ensure timely resolution of security findings.

• Monitor remediation progress and ensure identified security risks are clearly understood and appropriately addressed.

• Take ownership of remediation governance and proactively influence security outcomes.

• Contribute to the design of risk-scoring mechanisms enabling near real-time, risk-based vulnerability prioritization.

• Prepare and deliver presentations on remediation progress, security risks, and strategic recommendations.

• Support knowledge sharing and mentor other members of the security function.

• Apply automation and AI technologies to security governance and remediation processes.

Requirements

• At least 3+ years of hands-on experience in Cyber Security, particularly in security findings assessment and remediation.

• Expert knowledge of vulnerability management and vulnerability scoring frameworks.

• Strong knowledge of security risk assessment, risk-based prioritization, and remediation governance.

• Deep understanding of modern AI-related security threats and their impact on organizational security posture.

• Knowledge and practical experience with Secure DevOps, DORA, OWASP, and Problem Management.

• Strong troubleshooting and conceptual skills, including the ability to solve uncommon remediation-related security problems.

• Ability to interpret and communicate results using exploratory data analysis and statistical modelling.

• Good understanding of risk management and risk-based security approaches.

• Experience working and negotiating across multiple teams and organizational units.

• Experience preparing and presenting security findings, risks, and recommendations to stakeholders.

• Practical experience with automation, preferably using Python, Apache Airflow and/or Power Automate.

• Experience applying AI technologies in governance processes and automation workflows.

• Ability to mentor colleagues and contribute to security knowledge sharing.

• Fluent business and technical English, both written and spoken.