Vulnerability Management Engineer

Details

ING Hubs Poland is hiring a Vulnerability Management Engineer to support global vulnerability management and remediation activities. The role naming convention in the global ING job architecture will be “Engineer II”.

The expected salary for this position is PLN 7,100–15,000 per month. The financial ranges specified in the announcement are adjusted and may differ from the range specified in the remuneration regulations.

Responsibilities

• Manage complex follow-up cases related to vulnerability scanning, penetration testing, secret scanning, Red Team exercises, and security baseline validation findings.
• Identify and challenge ownership of findings and coordinate remediation activities across multiple stakeholders.
• Drive overdue findings toward remediation, mitigation, or formal risk registration.
• Perform root cause analysis and identify systemic issues that contribute to recurring findings.
• Design and maintain management reporting, KPIs, and Power BI dashboards.
• Recommend and implement process improvements to reduce recurring vulnerabilities and improve remediation outcomes.
• Prepare executive-level reports and present security risk insights to stakeholders.

Requirements

• At least 3 years of proven experience in vulnerability management, security testing, or cybersecurity operations.
• Strong understanding of risk management principles, vulnerability prioritization, and remediation governance.
• Ability to combine business context, asset criticality, severity, and remediation timelines into risk-based decision-making.
• Advanced analytical and data interpretation skills.
• Strong Power BI knowledge, including Power Query, data modeling, DAX, KPI development, and dashboard design.
• Excellent stakeholder management, communication, and coordination skills.
• Continuous improvement mindset with the ability to identify strategic opportunities to reduce organizational security risk.

Additional Qualifications

• Knowledge of vulnerabilities, such as the OWASP Top 10.
• Ability to solve complex problems and analyze their correlations, draw conclusions, and propose corrective actions or improvements.
• IT security-related certification, such as CompTIA CySA+, CompTIA Security+, CEH, CHFI, or CISSP.
• IT-related certification, such as RHCSA, MCSA, or CCNA.

Team Information

The Vulnerability Management Response Team ensures that identified vulnerabilities are effectively managed and remediated before they can be exploited by malicious actors. The team aims to eliminate security weaknesses and reduce the organization’s exposure to cyber threats. It supports ING globally and works closely with stakeholders across the organization to drive timely and effective remediation.

At ING Hubs Poland, the team embraces Agile ways of working and uses frameworks such as Scrum and Kanban to deliver value efficiently and continuously improve processes. The team is built on trust, collaboration, and empowerment, with a high level of employee autonomy that supports motivation, accountability, and creativity.