At Mindbox we connect top IT talents with technology projects for leading enterprises across Europe.
Join our client’s team, where you’ll play a key role in shaping the Vulnerability Management Response & Remediation function at one of the world’s leading international banks. Your contribution will help deliver high-impact solutions in cybersecurity – protecting a global financial institution’s technology estate across on-premise, cloud, and third-party environments.
Sounds like your kind of challenge?
Hybrid: 6x/msc from the office in Kraków
What you’ll be doing
- Assess and Review Vulnerabilities: Analyze critical and high-severity vulnerabilities (NIST/NVD, vendor advisories), determine exposure and impact on our environment.
- Validate and Map Risks: Confirm findings, validate exposure, and map vulnerabilities to assets through CMDB and inventory collaboration.
- Define Mitigation Strategies: Recommend remediation and mitigation approaches such as patching, upgrades, hardening, and compensating controls.
- Drive Execution & Governance: Coordinate remediation progress, ensure timely delivery, and provide high-quality technical and governance reports.
- Verify Effectiveness: Oversee validation testing and confirm closure of remediation activities.
- Regulatory & Audit Support: Provide data and commentary for regulatory, audit, and governance reporting (Risk Maps, KCIs, KRIs).
Note: Detailed project information will be shared during the recruitment process.
What you get in return
- Flexible cooperation model – choose the form that suits you best
(B2B, employment contract, etc.) - Hybrid work setup – Hybrid: 6x/msc from the office in Kraków
- Collaborative team culture – work alongside experienced professionals eager to share knowledge
- Continuous development – access to training platforms and growth opportunities
- Comprehensive benefits – including Interpolska Health Care, Multisport card, Warta Insurance, and more
- High quality equipment – laptop and essential software provided
Who we’re looking for
- Minimum 5 years of experience in IT Security or a similar role
- Proven experience reviewing and assessing critical/high-severity vulnerabilities from sources such as NIST/NVD and vendor advisories, translating findings into clear business impact
- Strong understanding of common vulnerability types and attack techniques (e.g., remote code execution, privilege escalation, authentication bypass)
- Experience with vulnerability scanning tools, including Tenable, and application security testing (SAST, DAST)
- Solid technical foundation across networking and application delivery, including WAFs, load balancers, and TLS/certificates
- Experience working across on-prem and cloud environments
- Practical knowledge of remediation approaches: patching, upgrades, configuration hardening, and compensating controls
- Strong stakeholder management skills – able to partner with service owners, platform teams, and governance stakeholders to drive actions to closure
- Excellent written communication skills
Nice to have
- Good understanding of the CI/CD lifecycle and how security testing integrates into build and release pipelines
- Background in Cyber Security Operations, Risk Management, or Governance within a mid-to-large enterprise
Joining this project you’ll become part of Mindbox – a tech-driven company where consulting, engineering, and talent meet to build meaningful digital solutions. We’ll back you up every step of the way, accelerate your development, and ensure your skills make a difference.
