Working Student — IT Security
2.5 years of operational IT security: assign, prioritise and track vulnerabilities with the DevOps teams until resolved.
Overview
The goal of my work was to support operational IT security, especially vulnerability management. My role covered assigning and tracking vulnerabilities, advising the responsible DevOps teams, documenting processes and providing status information for reporting, plus experience with ServiceNow, collaboration with penetration testers and analysis of TLS/SSL weaknesses like Sweet32.
Creative process
I transcribed results from scan processes, evaluated security findings and systematically passed them on to those responsible, building a knowledge base for more efficient handling of vulnerabilities. Risk assessments, process documentation in Confluence and regular retrospectives were part of it, as was specialising in cryptographic weaknesses.
Result
Over 2.5 years I was able to significantly improve the vulnerability-management process: through clear structures, close coordination with the DevOps teams and systematic documentation.
What I learned
How important structured processes, precise communication and technical expertise in IT security are — and how remediation, penetration testing and risk analysis interact.