Threat Intelligence and Vulnerability Management Engineer - Tietoevry Create (m/f/d)

This role focuses on supporting the identification and mitigation of threats and vulnerabilities using Microsoft Defender Vulnerability Management and Nexpose Rapid7. You’ll work closely with senior engineers and SOC analysts to help protect our environment and grow your expertise in threat analysis and risk reduction.

Responsibilities: Monitor and organize threat intelligence feeds and alerts from external sources. Assist in collecting and maintaining indicators of compromise (IOCs) and threat actor profiles. Support analysis of threat trends using frameworks like MITRE ATT&CK. Help enrich incident investigations with relevant threat context. Perform regular vulnerability scans using Microsoft Defender Vulnerability Management and Nexpose Rapid7 . Review scan results, assist in prioritizing vulnerabilities based on severity and exploitability. Coordinate with IT and application teams to track and verify remediation efforts. Maintain documentation of vulnerabilities, remediation status, and risk levels. Document findings, remediation actions, and process improvements. Work with SOC and incident response teams to support investigations and response efforts. Participate in team knowledge-sharing sessions and cybersecurity training. Stay updated on emerging threats, vulnerabilities, and security technologies.

Required Skills: Bachelor’s degree in Cybersecurity, Information Technology, or related field (or equivalent experience). 1–3 years of experience in cybersecurity, preferably in threat intelligence or vulnerability management. Familiarity with Microsoft Defender Vulnerability Management and Nexpose Rapid7. Basic understanding of threat intelligence concepts and vulnerability lifecycle. Exposure to SIEM platforms like Microsoft Sentinel is a plus. Strong attention to detail and eagerness to learn. Good communication skills and ability to work in a team.