Cybersecurity Specialist

Cybersecurity Specialist

About the Offer

We are currently looking for a Cybersecurity Specialist to join the team of our global client from the banking sector. You will own the governance of security findings: analysing scanning results, identifying remediation gaps, guiding remediation owners across the organisation and helping design risk scoring that lets the bank prioritise and fix critical vulnerabilities faster. For this role, Optiveum is the recruitment and contracting party, which means you will sign the cooperation agreement directly with us.

Key Details:

• Rate: up to 120 PLN/h net (B2B)

• Work Model: hybrid, 3 days a week in the office, full-time (40 h/week)

• Location: Tricity (Gdańsk/Gdynia) or Warsaw

Responsibilities:

• Leading the identification of remediation gaps and driving strategic resolution initiatives across the organisation

• Analysing complex vulnerability scanning results and turning them into actionable steps that reduce the bank's risk exposure

• Advising stakeholders on remediation strategies in line with security best practices and regulatory expectations

• Working with accountable and responsible remediation owners to ensure timely and effective execution

• Making sure security findings are clearly understood and that remediation progresses at the right pace

• Contributing to the design of risk scoring for near real-time, risk-based prioritisation of critical vulnerabilities

• Presenting remediation progress, risks and strategic recommendations to stakeholders

• Mentoring team members and sharing knowledge across the security function

Requirements:

• 3+ years of hands-on experience in security findings assessment and remediation

• Expert knowledge of vulnerability scoring frameworks (e.g. CVSS), security risk assessment methodologies and governance processes for severity, prioritisation and remediation timelines

• Governance experience in at least one of: External Attack Surface Management (EASM), Threat Modelling or API-related findings

• Knowledge of problem management, Secure DevOps, DORA and OWASP

• Deep understanding of modern AI threats and their impact on security posture, plus practical use of AI in governance and automation workflows

• Experience in automation, preferably with Python, Apache Airflow and/or Power Automate

• Ability to interpret and communicate results using exploratory data analysis and statistical techniques

• Solid understanding of the risk-based approach and risk management

• Strong troubleshooting and conceptual skills, autonomy and ownership

• Experience in cross-organisational collaboration and negotiation

• Fluent business and technical English (written and spoken)