We are not hiring someone to run scans. We are seeking a Tech Lead who thinks like an attacker, prioritizing targets rather than merely clearing a scan queue. The ideal candidate will own the full vulnerability lifecycle, incorporating AI-driven prioritization into processes and transforming remediation into a measurable, automated system.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
As the lead for Vulnerability Management spanning cloud, infrastructure, endpoints, and internal environments, your role will focus on shortening exposure windows and enhancing the maturity of our vulnerability program. This position is critical as unpatched exposures can pose significant risks to traders' funds and regulatory compliance.
Key Responsibilities:
- Own the full vulnerability lifecycle, including discovery, enrichment, risk-based prioritization, remediation, validation, and executive reporting.
- Lead the operation and optimization of Qualys VMDR (Cloud Agents, SCA, PCI, dashboards) across various environments, including AWS, GCP, Azure, Kubernetes, and on-premises infrastructure.
- Implement risk-based prioritization and design exception management.
- Define remediation SLAs, reduce exposure windows, and manage aging vulnerabilities.
- Correlate findings with threat intelligence to focus on exploitable assets.
- Develop automated workflows for ticket management and remediation validation.
- Utilize AI to enhance vulnerability context and implement secure automated patching.
- Act as the bridge between Global Security Operations and local IT/Engineering teams.
- Mentor analysts and represent the function during audits and architecture reviews.
Who You Are:
- 8-12+ years of cybersecurity experience, with specialization in vulnerability management.
- Expert-level knowledge of Qualys VMDR (or similar platforms).
- Strong familiarity with cloud security and vulnerability lifecycle governance.
- Hands-on experience with automation, scripting (Python, Bash), and API integrations.
- Proven ability to create dashboards and KPIs for executive decision-making.
- Experience in regulated environments (ISO 27001, GDPR, PCI-DSS).
This role offers the opportunity to architect an automation-first vulnerability management system on a global scale, significantly impacting enterprise risk reduction. If you are ready to build an engine that minimizes exploitable exposures and drive substantial security improvements, we encourage you to apply.
Location: Dubai, Dubai, United Arab Emirates
Work Conditions: On-site, Full-time
