Descrizione Del Lavoro
About FORFIRM
FORFIRM is a multidisciplinary consulting firm specializing in Financial Services, Compliance, Cybersecurity, Digital Transformation and IT Advisory. We support leading organizations in designing, implementing, and optimizing technology solutions that drive business value and operational excellence.
The Role
To strengthen our Cybersecurity practice, we are looking for a Vulnerability Management Specialist with proven hands-on experience with Qualys and Tenable Nessus .
The successful candidate will own the full vulnerability management lifecycle within enterprise environments, from identifying weaknesses to prioritizing remediation and verifying resolution, working closely with technical teams and business stakeholders to reduce risk and strengthen security posture.
Key Responsibilities
- Plan, configure and run vulnerability scans with Qualys and Nessus across networks, servers, endpoints, applications and cloud environments.
- Analyze scan results, eliminate false positives and prioritize vulnerabilities based on severity, exploitability and business context (CVSS).
- Define and track remediation plans in collaboration with IT and infrastructure teams.
- Produce technical and executive reports with KPIs and risk trends for management and clients.
- Maintain scan templates, policies, asset inventories and operating procedures.
- Support audits and compliance assessments (e.g. ISO 27001, NIS2, GDPR/nFADP).
- Monitor emerging threats, CVEs and vendor advisories, and provide best-practice guidance.
Requirements
- Minimum 3 years of hands-on experience in vulnerability management or security operations.
- Strong practical knowledge of Qualys (VMDR, Cloud Agent) and Nessus.
- Solid understanding of networking (TCP/IP, firewalls, segmentation) and of Windows and Linux systems.
- Familiarity with CVSS, MITRE ATT&CK, OWASP and CIS Benchmarks.
- Experience working in enterprise environments and communicating risk to both technical and business audiences.
- Excellent analytical, problem-solving and reporting skills.
- Professional proficiency in English; Italian is considered a plus.
Nice to Have
- Security certifications (e.g. CompTIA Security+, CEH, GIAC, CISSP, Qualys or Tenable certifications).
- Scripting experience (Python, PowerShell, Bash) for automation and API integration.
- Experience with SIEM, patch management and ITSM tools.
- Previous experience in regulated industries, particularly Financial Services.
#J-18808-Ljbffr
Vulnerability Management Specialist (Qualys & Nessus) Arbeitgeber: FORFIRM
FORFIRM ist ein hervorragender Arbeitgeber, der seinen Mitarbeitern in der Schweiz ein dynamisches und unterstützendes Arbeitsumfeld bietet. Mit einem starken Fokus auf berufliche Weiterentwicklung und Teamarbeit ermöglicht das Unternehmen seinen Angestellten, ihre Fähigkeiten im Bereich Netzwerksicherheit kontinuierlich auszubauen und an innovativen Projekten zu arbeiten. Die Unternehmenskultur fördert eine offene Kommunikation und Zusammenarbeit, was zu einer hohen Mitarbeiterzufriedenheit führt.
