Senior Vulnerability Management Specialist

SII Switzerland is seeking a Senior Vulnerability Management Specialist to oversee the entire application vulnerability management and remediation process. The company specializes in IT consulting and engineering services, aiding clients in their digital transformation and innovation projects. The main responsibilities include prioritizing vulnerabilities based on risk and criticality, managing Jira tickets, SLAs, and deadlines, and coordinating with developers to track remediation progress. The role also involves validating remediation through rescanning, developing dashboards and reports, and automating various processes to improve efficiency and developer experience. Candidates must have at least 5 years of experience in Vulnerability Management, Application Security, or DevSecOps, with proven experience in managing enterprise vulnerability remediation and coordinating with Development/DevOps teams. Strong knowledge of SDLC, CI/CD, OWASP Top 10, CVE, CVSS, CWE, and EPSS is essential. Hands-on experience with Snyk or similar AppSec tools, Jira, and CI/CD platforms (GitLab, GitHub, Azure DevOps) is required. Experience with AWS/Terraform and regulated environments (NIS2, ISO 27001) is also necessary. Nice-to-have skills include strong risk-based prioritization, stakeholder management, automation, and communication skills. The role is based in one of SII Switzerland's three offices in Geneva, Lausanne, or Zurich, where a collaborative and development-oriented work environment is valued. The company has been recognized as a Great Place To Work for three consecutive years, highlighting its commitment to employee satisfaction and professional growth. What the role asks for: - 5+ years of experience in Vulnerability Management, Application Security or DevSecOps - Proven experience managing enterprise vulnerability remediation and coordinating with Development/DevOps teams - Strong knowledge of SDLC, CI/CD, OWASP Top 10, CVE, CVSS, CWE and EPSS - Hands-on experience with Snyk or similar AppSec tools - Hands-on experience with Jira - Hands-on experience with CI/CD platforms (GitLab, GitHub, Azure DevOps) - Experience with AWS/Terraform - Experience with regulated environments (NIS2, ISO 27001)