Cyber Security Consultant – Threat Identification & Prioritization (f/m)

We are looking for a Cyber Security Consultant to join a team responsible for identifying, assessing, and prioritizing security vulnerabilities. The ideal candidate has hands-on knowledge of Vulnerability Management, cybersecurity fundamentals, and IT infrastructure.

Responsibilities

• Identify, investigate, and assess security vulnerabilities.

• Analyze vulnerabilities using sources such as CVE databases, NVD, vendor advisories, and security bulletins.

• Prioritize vulnerabilities based on CVSS scores, exploitability, asset criticality, and business impact.

• Support Vulnerability Management processes, including remediation and risk reduction activities.

• Work with vulnerability scanning and assessment tools.

• Analyze scan results and understand the capabilities and limitations of vulnerability scanning solutions.

• Analyze system logs and perform basic troubleshooting of operating systems and network connectivity.

• Support the identification of security risks related to AI systems, LLMs, and AI agents.

Requirements

• Solid understanding of cybersecurity principles and the common threat landscape.

• Practical knowledge of Vulnerability Management and vulnerability assessment processes.

• Good understanding of CVSS (Common Vulnerability Scoring System) and vulnerability severity classification and prioritization.

• Experience with vulnerability scanning tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar solutions.

• Ability to research and investigate vulnerabilities using CVE, NVD, vendor advisories, and security bulletins.

• Understanding of vulnerability remediation processes and risk reduction practices.

• Good knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, routing, firewalls, proxies, and network segmentation.

• Good understanding of Microsoft Windows and Linux, including system administration fundamentals and security best practices.

• Knowledge of common Linux commands, including grep, find, ps, netstat/ss, chmod, chown, journalctl, and systemctl.

• Basic knowledge of PowerShell, including administrative and information-gathering commands.

• Ability to analyze logs and collect information required for basic troubleshooting.

Nice to Have

• Basic understanding of security risks related to AI systems, AI agents, Large Language Models (LLMs), and AI-enabled applications.

• Awareness of AI-related vulnerabilities such as prompt injection, data leakage, excessive permissions, insecure integrations, and autonomous AI agent risks.

• Ability to assess vulnerabilities from both a technical and business impact perspective.