Vulnerability Manager – Retail & E‑commerce

About the role

Join Devoteam Cyber Trust’s Threat Operations team as a Vulnerability Manager, focusing on the retail and e‑commerce sector. You will lead the vulnerability management program, ensuring timely identification, prioritisation and remediation of security findings across the organisation.

Key responsibilities

• Manage the full vulnerability lifecycle for infrastructure and endpoints, analysing CVE, CVSS, KEV, exploitability and business context to define remediation SLAs.
• Monitor and validate remediation actions, flag SLA breaches, perform follow‑ups and escalate issues to relevant teams or management.
• Collaborate with AppSec and Cloud Security teams to assess vulnerabilities in development pipelines (SSDLC), cloud environments, containers and images.
• Validate security tool outputs, investigate false positives and ensure comprehensive coverage of the vulnerability management platform across the asset estate.
• Produce dashboards, KPIs and regular reports on critical vulnerabilities and remediation progress for senior management.

Required profile

• Solid understanding of vulnerability management concepts (CVE, CVSS, KEV, exploitability, severity) and experience defining and tracking remediation SLAs.
• Proven ability to create and interpret dashboards, KPIs and security reports.
• Knowledge of technology obsolescence (EOL/EOS) risk assessment.
• Experience working with cloud security findings and container image vulnerabilities.

Required skills

• Windows and Linux operating systems.
• Networking protocols: TCP/IP, DNS, HTTP/HTTPS.
• Vulnerability management platforms: Tenable One, CrowdStrike FEM.
• Cloud platforms: Microsoft Azure, Google Cloud.
• Security tooling for development pipelines: SCA, SAST, IaC scanning.

What we offer

• Professional development and talent monitoring.
• Collaborative culture with focus on flexibility, integrity and low ego.
• Commitment to equal opportunities and inclusion of people with disabilities.