Job
In this role, you will enhance vulnerability management, conduct regular vulnerability scans, analyze results, and coordinate patch management for Windows and Linux systems.
This listing has been machine translated. Show original
Job technologies
Your role in the team
- You will further develop our vulnerability management (Tenable) for servers, clients, network and cloud components, and plan, conduct and evaluate regular vulnerability scans.
- You consolidate and analyze scan results based on risk, prioritizing findings while taking threat intelligence into account.
- You develop targeted remediation recommendations, translate them into tickets, and work with the operations teams on mitigation.
- You coordinate and, in some cases, independently deploy patches on Windows, Linux, and client systems, align patch windows with Change Management and business departments, and support emergency patching, including documentation and follow-up.
- You establish KPIs such as patch compliance, MTTR for critical vulnerabilities, and scan coverage rates, and create analyses and reports.
- You work closely with the CSE team to synchronize infrastructure and application patching, thereby improving turnaround times, quality, and audit readiness throughout the remediation process.
Our expectations of you
Education
- You have completed vocational training or a degree in IT, or have equivalent relevant professional experience.
Qualifications
- You are proficient in using vulnerability management tools (e.g., Tenable, Qualys) and patch management solutions, and apply them effectively.
- You have a solid foundational understanding of network and cloud architectures (e.g., Azure) as well as common hardening requirements.
- You work in a structured, process- and documentation-oriented manner and are highly reliable.
- You communicate flawlessly in German.
Experience
- You have several years of experience in server/platform operations (Windows, Linux) and/or technical IT security.
- You collaborate constructively with various operations teams and communicate security requirements pragmatically; ideally, you have experience in regulated environments and are familiar with DORA.
What we offer
- With creative freedom and the opportunity to create value.
- With a positive work culture.
- With a structured and seamless onboarding experience through our Metzler buddy program.
- With the option to work remotely from other EU countries as well.
- With valuable benefits and personalized professional development.
Topics you will work on
Job locations
About your employer
Metzler ist Deutschlands ältestes Bankhaus in ununterbrochenem Familienbesitz. Wir konzentrieren uns auf individuelle Kapitalmarktdienstleistungen für Institutionen und anspruchsvolle Privatkunden in vier Kerngeschäftsfeldern: Asset Management, Capital Markets, Corporate Finance und Private Banking.
- Established Company
- Onsite, Hybrid, Full Remote
- Banking, Finance, Insurance
More jobs
These jobs might also interest you
Participation in security analyses and assessment of applications and IT systems. Support in the design and implementation of technical security measures (e.g., WAF, Load Balancing, Firewall, etc.). Conducting and supporting penetration tests,...
Area of responsibility “DRV Bund IT” is the service provider for Deutsche Rentenversicherung Bund, developing and operating a complex IT system landscape in close coordination with its customers. Our “IT4IT” domain provides IT departments across DRV...
Lead our Stuttgart IT team, both professionally and as line manager, set priorities, and support each team member's development. Ensure the secure, reliable, and efficient operation of our heterogeneous IT infrastructure, including networks, servers,...