> Markdown version of [/jobs/ext/3841880-cyber-vulnerability-management-operator](https://www.wearedevelopers.com/jobs/ext/3841880-cyber-vulnerability-management-operator). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Cyber - Vulnerability Management Operator

- **Company:** Deloitte
- **Location:** Madrid, Spain (Remote available)
- **Contract:** Permanent contract
- **Skills:** Microsoft Excel, Cloud Computing, Cloud Computing Security, Cyber Security, Information Systems, Databases, Issue Tracking Systems, Software Vulnerability Management, Cyber Threat Analysis, Information Technology, Qualys, Servicenow, Vulnerability Analysis
- **Published:** October 20, 2026
- **Apply:** https://empleo.es.deloitte.com/talentcommunity/apply/1449306633/?locale=es_ES

## About the Role

* Bachelor's degree in Computer Science, Information Security, Information Systems or equivalent experience.
 * 5+ years' experience in vulnerability management, security operations, or infrastructure security in large, complex environments.
 * Hands-on experience with vulnerability scanning platforms (e.g., Qualys, Tenable, Rapid7) and familiarity with cloud security tooling.
 * Strong understanding of CVSS, exploitability factors, threat intelligence, patching lifecycles and on-prem/cloud/hybrid environments.
 * Proven ability to triage critical vulnerabilities, validate remediation and communicate technical guidance to non-security stakeholders.
 * Experience with CMDBs and ticketing systems (e.g., ServiceNow) and advanced proficiency in MS Excel for reporting and metrics.
 * Excellent collaboration, prioritisation and communication skills; attention to detail and ability to manage multiple concurrent workstreams.

## Description

* Manage and optimise global VM infrastructure and scanning tool configurations (e.g., Qualys, Tenable, Rapid7); support major upgrades and platform changes to ensure stability and consistency.
 * Perform in-depth validation and analysis of vulnerability findings from enterprise scanners and threat intelligence: assess exploitability, asset criticality, exposure and business impact to prioritise remediation.
 * Identify and resolve false positives, compensating controls and misclassifications; conduct authenticated scanning and validate coverage across networks, OS, applications, databases and cloud assets.
 * Act as Tier-2 escalation for critical or SLA-at-risk findings; coordinate with Member Firms, Infrastructure, Cloud, Application and Engineering teams to drive remediation ownership and closure.
 * Track remediation commitments, validate fixes via rescans or evidence review, and ensure audit-defensible closure; support exception handling and risk acceptance processes.
 * Produce reports, dashboards and exposure metrics to inform leadership and support decision-making; contribute to vulnerability trend analysis and SLA reporting.
 * Automate repetitive tasks, develop scripts/reports/dashboards, and propose process improvements to increase efficiency and data quality.
 * Support rapid response for zero-day vulnerabilities and executive-level incidents, including ad-hoc scans and time-sensitive analysis.
 * Maintain accurate ticketing and VM records in enterprise workflow tools and contribute to runbooks, SOPs and operational documentation.