Illustrative Reference profiles for a generic digital health care organization, not official job descriptions. About this reference.

Vulnerability management

Finding, assessing, prioritizing, and fixing technical vulnerabilities, including scanning, penetration testing, and patching.

Original to this reference.

Levels

1. Awareness

You can:

  • explain why prompt patching and secure configuration matter
2. Working

You can:

  • run vulnerability scans and report the results
  • track fixes with system owners
3. Practitioner

You can:

  • prioritize vulnerabilities by risk, including to patient services
  • scope and manage penetration tests and remediation
4. Expert

You can:

  • set the vulnerability management policy and its targets
  • report technical security risk to senior leaders

Closest ESCO skills

Contains ESCO v1.2.1 data (https://esco.ec.europa.eu/). © European Union. Reuse authorised under Commission Decision 2011/833/EU.

Role levels that expect this skill

Role levelRoleBandExpected level
Cyber security managerCyber security manager8aPractitioner
Junior DevOps engineerDevOps engineer5Awareness
DevOps engineerDevOps engineer6Working
Senior DevOps engineerDevOps engineer7Practitioner
Lead DevOps engineerDevOps engineer8bPractitioner
Principal DevOps engineerDevOps engineer8cExpert
End user computing engineerEnd user computing engineer5Awareness
Senior end user computing engineerEnd user computing engineer6Working
Lead end user computing engineerEnd user computing engineer7Practitioner
Principal end user computing engineerEnd user computing engineer8bPractitioner
Associate infrastructure engineerInfrastructure engineer4Awareness
Infrastructure engineerInfrastructure engineer6Working
Senior infrastructure engineerInfrastructure engineer7Practitioner
Lead infrastructure engineerInfrastructure engineer8aPractitioner
Principal infrastructure engineerInfrastructure engineer8bExpert
Network architectNetwork architect7Working
Lead network architectNetwork architect8aPractitioner
Security architectSecurity architect8aPractitioner
Lead security architectSecurity architect8bPractitioner
Principal security architectSecurity architect8cPractitioner
Security engineerSecurity engineer6Working
Senior security engineerSecurity engineer7Practitioner
Lead security engineerSecurity engineer8aPractitioner
Junior security operations analystSecurity operations analyst5Working
Security operations analystSecurity operations analyst6Working
Senior security operations analystSecurity operations analyst7Practitioner