Plant Security Specialist

Vestas

Location: Leça do Balio, Grande Porto
Work arrangement: Hybrid
Job type: Full-time
Posted Oct 15

Apply on original website

Opens careers.vestas.com in a new tab. Check the address before sharing personal information.

Key skills in this ad

Skills and tools

DevOps
Kubernetes
CI/CD
Observability
Cybersecurity
Inventory management
Learning and development
Agile
Manufacturing
Social media

Experience

Minimum of 5 years

Languages

English

About this role

Are you on the lookout for your next big career move?

Vestas Technology & Operations > Research & Development (R&D) > Software Product Delivery and Security

Software Product Delivery and Security is the platform engineering and DevOps enablement team at Vestas, responsible for building, running, securing, and evolving the Internal Developer Platform - the shared infrastructure, tooling, and practices that hundreds of application developers rely on to develop, deliver, and operate their software. We own and continuously enhance the security posture of the platform, including Kubernetes clusters, CI/CD pipelines, observability stack, secrets management, and source code hosting, ensuring secure-by-design and secure-by-default capabilities across software delivery for the Turbine and Power Plant domains. This includes embedding cybersecurity controls, supporting vulnerability management, enforcing secure development practices, and aligning with industry standards for industrial and enterprise cybersecurity.

We are a small, tight-knit team split between Aarhus, Denmark, and Porto, Portugal. Everyone owns a real domain and operates with a high degree of self-direction - while maintaining a shared sense of responsibility for both platform reliability and cybersecurity. We stay closely aligned, quickly address risks, and take each other's operational and security challenges seriously.

Responsibilities

Monitor, track, and manage reported vulnerabilities across power plant products, systems, and supporting infrastructure

Perform vulnerability analysis, including assessing exploitability and determining potential impact

Calculate and maintain risk scores using CVSS and internal risk assessment methodologies

Prioritize vulnerabilities based on risk, business impact, and operational criticality

Define and coordinate mitigation and remediation plans, including patch management activities

Collaborate with engineering, operations, and security teams to ensure timely resolution of vulnerabilities

Maintain visibility of vulnerability status and provide regular reporting to stakeholders

Ensure alignment with cybersecurity standards, particularly IEC 62443, in vulnerability handling processes

Qualifications

Bachelor's degree in Computer Science, Cybersecurity, Engineering, or a related field (or equivalent experience)

Minimum of 5 years of practical experience, mainly with vulnerability management platforms and tools

Solid knowledge of vulnerability assessment frameworks, including CVSS

Familiarity with industrial cybersecurity standards, especially IEC 62443, including SL-C and SL-T concepts

Understanding of asset inventory management and configuration management practices

Fluency in English (written and spoken)

Competencies

Solid analytical skills with the ability to assess technical vulnerabilities and translate them into business risk

Proficiency in risk-based prioritization and decision-making in complex, safety-critical environments

Solid understanding of CVSS scoring and the ability to apply or adapt custom risk models

Effective communication skills, with the ability to convey technical findings to non-technical stakeholders

Solid organizational skills, with attention to detail and the ability to manage multiple vulnerabilities simultaneously

Collaborative mindset, working effectively across security, engineering, compliance, and operations teams

Problem-solving ability and a forward-thinking approach to risk mitigation

What We Offer

We offer an environment where your interest in continuous learning and development can truly thrive. You will join an informal, agile workplace that provides a high degree of ownership in shaping the path forward. While we expect our team members to take full responsibility for their tasks and deadlines, we equally value celebrating achievements and learning from setbacks together.

Additional information

This is a hybrid position based in Porto, Portugal, and requires up to 5 travel days per year.

We will be reviewing applications on a rolling basis, therefore, early applications are encouraged. To apply for this opportunity, please submit your CV in English.

Please note: We reserve the right to amend or withdraw this job posting at any time.

Our commitment to a fair hiring

At Vestas, we evaluate all candidates solely based on their professional experience, education, and relevant skills. To support a fair recruitment process, we kindly ask that you remove any photos, dates of birth or graduation, gender pronouns, marital status, or other personal information not relevant to the role before submitting your CV/resume. Your CV/resume should focus on your professional and educational background, along with the necessary contact details (email and phone number). We train our hiring teams in inclusive evaluation and regularly review process outcomes to ensure fairness.

DEIB Statement

At Vestas, we recognize the value of diversity, equity, and inclusion in driving innovation and success. We strongly encourage individuals from all backgrounds to apply, particularly those who may hesitate due to their identity or feel they do not meet every criterion. As our CEO states, "Expertise and talent come in many forms, and a diverse workforce enhances our ability to think differently and solve the complex challenges of our industry". Your unique perspective is what will help us powering the solution for a sustainable, green energy future.

BEWARE – RECRUITMENT FRAUD

It has come to our attention that there are a number of fraudulent emails from people pretending to work for Vestas. Read more via this link, https://www.vestas.com/en/careers/our-recruitment-process

About Vestas

Vestas is the energy industry’s global partner on sustainable energy solutions. We are specialised in designing, manufacturing, installing, and servicing wind turbines, both onshore and offshore.

Across the globe, we have installed more wind power than anyone else. We consider ourselves pioneers within the industry, as we continuously aim to design new solutions and technologies to create a more sustainable future for all of us. With more than 200 GW of wind power installed worldwide and 40+ years of experience in wind energy, we have an unmatched track record demonstrating our expertise within the field.

With 39,000 employees globally, we are a diverse team united by a common goal: to power the solution – today, tomorrow, and far into the future.

Vestas promotes a diverse workforce which embraces all social identities and is free of any discrimination. We commit to create and sustain an environment that acknowledges and harvests different experiences, skills, and perspectives. We also aim to give everyone equal access to opportunity.

To learn more about our company and life at Vestas, we invite you to visit our website at www.vestas.com and follow us on our social media channels. We also encourage you to join our Talent Universe to receive notifications on new and relevant postings.

Pay

Pay is not stated in the ad.

Estimate take-home pay for a figure you enter

Estimated take-home pay

Explore gross pay after typical payroll taxes for a work location.

Gross salary (EUR) Enter the salary in the selected country's currency.Country City or area (optional)

Illustrative estimate only; assumes a standard employee profile and may omit benefits, pensions, credits and local rules. Regional and city-specific tax applies only where the selected calculator supports it; other results are country-level. Salary and location are sent only when you calculate: Paysums for supported regions, or WorthOf for wider country coverage. Confirm with an official payroll or tax source before making decisions.