Vulnerability Manager - Flutter Functions, Hybrid
HybridCluj-Napoca, Cluj County, Romania
Job Summary
Lead the end-to-end vulnerability management lifecycle, covering identification, prioritisation, and remediation tracking across AWS, OCI, and SaaS platforms using Wiz, CrowdStrike Falcon Shield, and code scanning tools. Define policies, playbooks, and SLA frameworks while acting as the primary liaison between security and engineering/DevOps teams to drive closure rates. Engage directly with development teams to deliver enablement training, build automation for prioritisation workflows, and establish dashboards for real-time vulnerability posture visibility. Translate complex risk data into actionable narratives for engineering leads and senior stakeholders.
Required Qualifications
- Proven experience leading or owning a vulnerability management programme in a large, complex enterprise environment
- Hands-on expertise with Wiz for cloud security posture and vulnerability management across AWS and OCI
- Experience with CrowdStrike Falcon Shield SSPM or equivalent SaaS security posture management tooling
- Strong track record of engaging directly with development and engineering teams to drive remediation outcomes — including delivering training and producing enablement materials
- Experience designing and implementing automation within vulnerability management workflows (e.g., auto-ticketing, prioritisation pipelines, reporting dashboards)
- Deep understanding of cloud-native vulnerabilities, misconfigurations, and secure architecture patterns (AWS, OCI)
- Strong working knowledge of SAST, SCA, and DevSecOps pipeline security
- Experience with risk-based vulnerability prioritisation using threat intelligence and business context
- Familiarity with additional scanning platforms such as Tenable, Qualys, Snyk, or AWS Inspector
- Hands-on security incident analysis experience, preferably with Splunk or equivalent SIEM
- Knowledge of OWASP tools, methodologies, and secure development frameworks
- Experience in regulated or large-scale gaming/fintech environments
- Relevant certifications: CISSP, CISM, AWS Security Specialty, or equivalent
Desired Qualifications
- Experience with CrowdStrike Falcon Shield SSPM or equivalent SaaS security posture management tooling
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.