Vulnerability Manager – Flutter Functions

Betfair Romania Development

Vulnerability Manager leading the vulnerability management programme across Flutter globally. Engaging with development teams to enhance security measures and remediation strategies.

Posted 7/24/2026full-timeCluj-Napoca • 🇷🇴 RomaniaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in leading vulnerability management programs, with a focus on cloud security posture and vulnerability remediation across AWS and OCI environments. Proficient in engaging with engineering teams to drive secure practices and implementing automation within vulnerability workflows.

Highest-signal resume keywords

Vulnerability Management Programme LeadershipWiz Cloud Security ExpertiseCrowdStrike Falcon Shield SSPM ExperienceRisk-Based Vulnerability PrioritisationSAST/SCA and DevSecOps Pipeline Security

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability ManagementCloud Security Posture ManagementAutomation in Vulnerability WorkflowsRisk-Based PrioritisationCloud-Native VulnerabilitiesSAST KnowledgeSCA KnowledgeIncident AnalysisOWASP MethodologiesSecure Architecture Patterns

Soft Skills

Technical MentorshipRelationship BuildingTraining DeliveryClear CommunicationProactive Problem Solving

Tools & Technologies

WizCrowdStrike Falcon Shield SSPMTenableQualysSnykAWS InspectorSplunk

Certifications & Qualifications

CISSPCISMAWS Security Specialty

Industry Keywords

GamingFintechRegulated EnvironmentsVulnerability TriageSecure Development Frameworks

Tech Stack

Tools & technologies

AWSCloudFlutterSplunk

About the role

Key responsibilities & impact

Lead the vulnerability management programme, setting strategic direction, defining KPIs, and driving measurable remediation outcomes across Flutter globally.
Act as the primary liaison between the security team and engineering/DevOps teams, building trusted relationships that translate into tangible vulnerability closure rates.
Define and own vulnerability management policies, procedures, playbooks, and SLA frameworks, ensuring they are current, fit-for-purpose, and understood across the organisation.
Provide technical mentorship and guidance to junior analysts and wider engineering stakeholders on vulnerability triage, risk rating, and secure remediation approaches.
Own the end-to-end findings lifecycle using Wiz for cloud vulnerability and misconfiguration identification across AWS and OCI environments.
Manage SaaS application misconfiguration and vulnerability findings using CrowdStrike Falcon Shield SSPM, ensuring timely triage and remediation.
Analyse findings from code scanning tools (SAST, SCA) and partner with development teams to drive secure-by-design practices within DevSecOps pipelines.
Apply risk-based prioritisation using threat intelligence, asset criticality, business context, and exploitability data to focus remediation effort where it matters most.
Lead direct engagement with development, platform, and DevOps teams to drive vulnerability remediation — providing clear, actionable guidance on fixes, mitigating controls, and configuration changes.
Design and deliver targeted security training and awareness sessions for engineering teams, tailored to the vulnerability patterns and tooling relevant to their platforms.
Develop and maintain practical remediation runbooks and self-service resources to empower teams to resolve common findings independently.
Track patching SLAs, escalate blockers proactively, and report on remediation velocity and trends to senior stakeholders.
Identify and implement automation opportunities across the vulnerability management lifecycle — including alerting, ticketing, prioritisation workflows, and reporting — to scale programme capability.
Continuously improve vulnerability management workflows, tooling integrations (Wiz, Falcon SSPM, SAST/SCA platforms), and prioritisation logic as the programme matures.
Build dashboards and reporting mechanisms that provide real-time visibility of vulnerability posture to engineering leads and senior leadership.

Requirements

What you’ll need

Proven experience leading or owning a vulnerability management programme in a large, complex enterprise environment.
Hands-on expertise with Wiz for cloud security posture and vulnerability management across AWS and OCI.
Experience with CrowdStrike Falcon Shield SSPM or equivalent SaaS security posture management tooling.
Strong track record of engaging directly with development and engineering teams to drive remediation outcomes — including delivering training and producing enablement materials.
Experience designing and implementing automation within vulnerability management workflows (e.g., auto-ticketing, prioritisation pipelines, reporting dashboards).
Deep understanding of cloud-native vulnerabilities, misconfigurations, and secure architecture patterns (AWS, OCI).
Strong working knowledge of SAST, SCA, and DevSecOps pipeline security.
Experience with risk-based vulnerability prioritisation using threat intelligence and business context.
Familiarity with additional scanning platforms such as Tenable, Qualys, Snyk, or AWS Inspector.
Hands-on security incident analysis experience, preferably with Splunk or equivalent SIEM.
Knowledge of OWASP tools, methodologies, and secure development frameworks.
Experience in regulated or large-scale gaming/fintech environments.
Relevant certifications: CISSP, CISM, AWS Security Specialty, or equivalent.

Benefits

Comp & perks

Hybrid & remote working options
€1,000 per year for self-development
Company share scheme
25 days of annual leave per year
20 days per year to work abroad
5 personal days/year
Flexible benefits: travel, sports, hobbies
Extended health, dental and travel insurances
Customized well-being programmes
Career growth sessions
Thousands of online courses through Udemy
A variety of engaging office events