About the Role
We are seeking a Vulnerability Security Engineer to support one of our clients in managing cybersecurity vulnerabilities across IT infrastructure, applications, cloud environments, and, where applicable, OT systems. The role involves conducting vulnerability assessments, managing scanning platforms, prioritizing security risks, coordinating remediation activities, and ensuring continuous monitoring and reporting of vulnerabilities.
Ready to apply for roles like this?
Unlock the company name and direct application link. Subscribers get instant access to fresh jobs across Dubai, Abu Dhabi and Riyadh, many with visa support.
Unlock employer & apply directly
Responsibilities
- Perform vulnerability assessments and manage regular security scans across IT infrastructure, applications, cloud, and relevant OT environments.
- Analyze and prioritize identified vulnerabilities based on severity, exploitability, asset criticality, and business impact.
- Administer and maintain vulnerability scanning platforms, including scan configurations, schedules, asset coverage, and troubleshooting.
- Coordinate with IT, security, and system owners to track remediation activities, follow up on outstanding findings, and ensure timely resolution.
- Validate remediation actions through rescanning and appropriate verification methods.
- Monitor emerging vulnerabilities, security advisories, and threat intelligence, escalating critical risks when necessary.
- Maintain vulnerability dashboards, risk registers, and remediation reports, providing clear updates to technical teams and management.
- Support vulnerability risk assessments, security exceptions, audits, and continuous improvement of vulnerability management processes.
Requirements
- 2–5 years of relevant experience in cybersecurity, with hands-on exposure to vulnerability assessment and management.
- Bachelor's degree in cybersecurity, IT, computer science, or a related field.
- Practical experience with vulnerability scanning tools such as Tenable Nessus, Qualys, Rapid7, or Microsoft Defender Vulnerability Management.
- Good understanding of vulnerability management processes, CVE/CVSS scoring, risk prioritization, and remediation tracking.
- Solid knowledge of IT infrastructure, networking, Windows/Linux systems, and common security vulnerabilities.
- Familiarity with cybersecurity frameworks and standards such as ISO 27001, NIST CSF, or CIS Controls.
- Exposure to cloud security, scripting/automation, or OT/ICS environments would be an advantage.
- Relevant cybersecurity certifications such as CompTIA Security+, CySA+, CEH, or equivalent would be an advantage.
Why Join Us?
🧬 Our DNA: Trust, Entrepreneurial Spirit, Solidarity, Autonomy, Responsibility
Joining us means becoming part of a large group while enjoying the agility and warmth of a human-sized company!
🚀 A personalized onboarding journey from day one, with tailored career follow-up
🏫 Opportunities for growth, training, and mobility within a fast-growing international group
🙏🏼 Close and supportive management
💶 Recognition of employee performance through a company savings plan
🥇 Pride in shared achievements
☘️ Respect for the environment and local communities in the countries where we operate (Human Rights Guide)
🦺 Commitment to the health and safety of our employees
👋 At the company, CSR initiatives are deeply embedded in our activities, our ways of working, and ultimately, in our DNA
