Hybrid Vulnerability & Configuration Management Engineer

at Relax Gaming Ltd

• Job title: Vulnerability & Configuration Management Engineer
• Job type: Full Time
• Experience level: Mid level, Senior
• Salary: Not specified
• Degree requirement: Bachelor's Degree
• Tech skills: Kubernetes
• Location requirements: Hybrid, Helsinki, Finland

About the role

• Vulnerability & Configuration Management Engineer responsible for vulnerability management and remediation processes at Relax Gaming. Collaborate with IT teams to improve security measures across various platforms.

Responsibilities

• Own and continuously improve the Vulnerability Management programme across applications, infrastructure and end-user devices
• Operate vulnerability management across the full IT estate including code, containers, servers, Kubernetes and endpoints
• Investigate vulnerabilities, drive remediation, and escalate complex issues when required
• Define and maintain processes for technical risk assessment, reporting, escalation and exception handling of vulnerability and configuration items
• Document vulnerability and configuration exceptions in a structured and auditable way
• Provide regular reporting to stakeholders including management, regulators and external partners
• Own and manage recurring reviews of secure configurations (endpoints, baselines, environments, Microsoft recommendations, etc.)
• Manage the full risk lifecycle for vulnerabilities and configuration-related risks
• Contribute to broader security initiatives and tasks as required
• Drive automation of vulnerability analysis, risk scoring and reporting
• Collaborate with engineering and IT teams to prioritise remediation aligned with risk appetite
• Propose and implement pragmatic, secure configuration improvements

Requirements

• Strong experience in Vulnerability Management
• Solid reporting and risk communication skills
• Automation experience is beneficial
• Hands-on experience with tools such as Tenable, Microsoft Vulnerability Management, and Snyk
• Understanding of risk management principles
• Experience: 6+ years in a relevant security role
• Certifications (preferred) SC-200 – Microsoft Security Operations Analyst
• MD-102 – Microsoft 365 Endpoint Administrator Associate
• SC-300 – Microsoft Identity and Access Administrator
• Tenable certifications
• Nice to have Experience in a scaling or maturing startup environment
• Experience within iGaming or other regulated industries
• Bachelor’s degree in Computer Science or similar
• CISSP / CISM

Benefits

• World-class Colleagues
• Value Driven Company
• Opportunities to Grow
• A 'Relaxed' Environment