Senior Vulnerability Management Engineer
Munich, Germany
Celonis
The Celonis Process Intelligence Platform — powered by process mining — lets you reveal and realize the value opportunities hiding in your business processes - fast. Get started quickly and scale infinitely.We're Celonis, the global leader in process mining technology, and we’ve delivered enormous value to the world’s largest and most esteemed companies. To continue to help organizations uncover hidden business value opportunities, reduce carbon emissions, and radically improve customer service, we need you to join us.
The Role:
As a leading player in Process Mining technology, Celonis is seeking an experienced Senior Vulnerability Management Engineer to be an integral part of our world-class Security Engineering Team. This role is pivotal in safeguarding Celonis' cloud-native and on-prem infrastructure by identifying, assessing, and prioritizing vulnerabilities.
The work you’ll do:
- Execute comprehensive vulnerability scans across various technological domains including network, cloud, and applications.
- Interpret and triage findings from network scanners, Cloud Security Posture Management (CSPM), Software Composition Analysis (SCA), and Static Application Security Testing (SAST).
- Provide actionable intelligence and prioritization metrics to remediation teams.
- Develop and maintain an asset inventory for dynamic scanning requirements.
- Create executive-level vulnerability metrics and dashboards.
- Participate in Red Team exercises to identify potential vulnerabilities proactively.
The qualifications you need:
- Bachelor’s or Master’s degree in Computer Science, Cybersecurity, or related field.
- Minimum of 5 years in a dedicated vulnerability management role.
- Deep understanding of networking protocols and cloud architectures.
- Certified Information Systems Security Professional (CISSP) or Certified Ethical Hacker (CEH) certification is a plus.
- Hands-on experience with premium vulnerability scanning tools such as Qualys, Nessus, or similar.
- Strong proficiency in CSPM tools like Prisma, Dome9, or similar.
- Expertise in interpreting SAST results from tools like Checkmarx or Veracode.
- Excellent scripting skills in Python or Bash for custom vulnerability identification.
What Celonis can offer you:
- The unique opportunity to work within a new category of technology, Process Intelligence
- Investment in your personal growth and skill development (clear career paths, internal mobility opportunities, L&D platform, mentorships, and more)
- Great compensation and benefits packages (equity (restricted stock units), life insurance, time off, generous leave for new parents from day one, and more). For intern and working student benefits, click here
- Physical and mental well-being support (subsidized gym membership, access to counselling, virtual events on well-being topics, and more)
- A global and growing team of Celonauts from diverse backgrounds to learn from and work with
- An open-minded culture with innovative, autonomous teams
- Business Resource Groups to help you feel connected, valued and seen (Black@Celonis, Women@Celonis, Parents@Celonis, Pride@Celonis, Resilience@Celonis, Asians@Celonis, Latinx@Celonis, Veterans@Celonis and more
- A clear set of company values that guide everything we do: Live for Customer Value, The Best Team Wins, We Own It, Earth Is Our Future
About Us
Since 2011, Celonis has helped thousands of the world’s largest and most esteemed companies yield immediate cash impact, radically improve customer experience, and reduce carbon emissions. Its Process Intelligence platform uses industry-leading process mining technology and AI to present companies with a living digital twin of their end-to-end processes. For the first time, everyone in an organization has a common language for how the business runs, visibility into where value is hiding, and the ability to capture it. Celonis is headquartered in Munich, Germany and New York City, USA with more than 20 offices worldwide.
Celonis is an equal opportunity employer. We celebrate diversity and are committed to creating an inclusive environment and equal opportunity in all aspects of employment. We will not tolerate any unlawful discrimination or harassment of any kind. We make all employment decisions without regard to race/ethnicity, color, sex, pregnancy, age, sexual orientation, gender identity or expression, transgender status, national origin, citizenship status, religion, physical or mental disability, veteran status, or any other factor protected by applicable anti-discrimination laws. As a US federal contractor, we are committed to the principles of affirmative action in accordance with applicable laws and regulations. Different makes us better.
* Salary range is an estimate based on our InfoSec / Cybersecurity Salary Index 💰
Tags: Application security Bash CEH Checkmarx CISSP Cloud Computer Science CSPM Nessus Python Qualys Red team SAST Scripting Veracode Vulnerabilities Vulnerability management Vulnerability scans
Perks/benefits: Career development Equity Fitness / gym Insurance Team events
More jobs like this
Explore more InfoSec / Cybersecurity career opportunities
Find even more open roles in Ethical Hacking, Pen Testing, Security Engineering, Threat Research, Vulnerability Management, Cryptography, Digital Forensics and Cyber Security in general - ordered by popularity of job title or skills, toolset and products used - below.
- Open Information Security Specialist jobs
- Open Information Systems Security Officer (ISSO) jobs
- Open Ethical hacker / Pentester H/F jobs
- Open Senior Cyber Security Engineer jobs
- Open Principal Security Engineer jobs
- Open Manager Pentest H/F jobs
- Open Cyber Security Architect jobs
- Open Cyber Security Specialist jobs
- Open Product Security Engineer jobs
- Open Cybersecurity Analyst jobs
- Open Staff Security Engineer jobs
- Open Chief Information Security Officer jobs
- Open Senior Information Security Analyst jobs
- Open Consultant infrastructure sécurité H/F jobs
- Open IT Security Analyst jobs
- Open Cybersecurity Consultant jobs
- Open Senior Penetration Tester jobs
- Open Consultant SOC / CERT H/F jobs
- Open Security Specialist jobs
- Open Senior Information Security Engineer jobs
- Open Sr. Security Engineer jobs
- Open Security Researcher jobs
- Open IT Security Engineer jobs
- Open Cybersecurity Specialist jobs
- Open Senior Security Architect jobs
- Open Windows-related jobs
- Open CISM-related jobs
- Open Network security-related jobs
- Open Pentesting-related jobs
- Open ISO 27001-related jobs
- Open Application security-related jobs
- Open Agile-related jobs
- Open GCP-related jobs
- Open Vulnerability management-related jobs
- Open Analytics-related jobs
- Open CISA-related jobs
- Open IAM-related jobs
- Open Threat intelligence-related jobs
- Open SaaS-related jobs
- Open APIs-related jobs
- Open Security assessment-related jobs
- Open Java-related jobs
- Open Malware-related jobs
- Open Forensics-related jobs
- Open DevOps-related jobs
- Open IDS-related jobs
- Open Security Clearance-related jobs
- Open CEH-related jobs
- Open EDR-related jobs
- Open Kubernetes-related jobs