Cyber Security Consultant – Threat Identification & Prioritization (f/m)

We are looking for a Cyber Security Consultant to join a team responsible for identifying, assessing, and prioritizing security vulnerabilities. The ideal candidate has hands-on knowledge of Vulnerability Management, cybersecurity fundamentals, and IT infrastructure.

Responsibilities

• Identify, investigate, and assess security vulnerabilities.
• Analyze vulnerabilities using sources such as CVE databases, NVD, vendor advisories, and security bulletins.
• Prioritize vulnerabilities based on CVSS scores, exploitability, asset criticality, and business impact.
• Support Vulnerability Management processes, including remediation and risk reduction activities.
• Work with vulnerability scanning and assessment tools.
• Analyze scan results and understand the capabilities and limitations of vulnerability scanning solutions.
• Analyze system logs and perform basic troubleshooting of operating systems and network connectivity.
• Support the identification of security risks related to AI systems, LLMs, and AI agents.

Requirements

• Solid understanding of cybersecurity principles and the common threat landscape.
• Practical knowledge of Vulnerability Management and vulnerability assessment processes.
• Good understanding of CVSS (Common Vulnerability Scoring System) and vulnerability severity classification and prioritization.
• Experience with vulnerability scanning tools such as Qualys, Tenable Nessus, Rapid7, OpenVAS, or similar solutions.
• Ability to research and investigate vulnerabilities using CVE, NVD, vendor advisories, and security bulletins.
• Understanding of vulnerability remediation processes and risk reduction practices.
• Good knowledge of networking fundamentals, including TCP/IP, DNS, DHCP, routing, firewalls, proxies, and network segmentation.
• Good understanding of Microsoft Windows and Linux, including system administration fundamentals and security best practices.
• Knowledge of common Linux commands, including grep, find, ps, netstat/ss, chmod, chown, journalctl, and systemctl.
• Basic knowledge of PowerShell, including administrative and information-gathering commands.
• Ability to analyze logs and collect information required for basic troubleshooting.

Nice to Have

• Basic understanding of security risks related to AI systems, AI agents, Large Language Models (LLMs), and AI-enabled applications.
• Awareness of AI-related vulnerabilities such as prompt injection, data leakage, excessive permissions, insecure integrations, and autonomous AI agent risks.
• Ability to assess vulnerabilities from both a technical and business impact perspective.