Qureos Mentor

International Turnkey Systems - ITS

<div>
 
 We are looking for Vulnerability Management Lead to be responsible for driving the end-to-end vulnerability management lifecycle at IT Management premises in Bahrain. This role will oversee Qualys scan coverage, risk-based prioritization, remediation governance, and technical reporting, while coordinating closely with offshore patch engineering teams. Acting as the central authority for vulnerability operations, the Lead will ensure timely identification, classification, and remediation of vulnerabilities, track closure and exceptions, validate patch deployments, and deliver executive-level reporting.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Own the vulnerability management lifecycle across discovery, scan coverage, triage, prioritization, remediation tracking, validation and reporting.
 </li>
 <li>
 Administer and operate Qualys reporting and dashboards based on IT MGMT.-provided tools and access.
 </li>
 <li>
 Identify newly applicable patches and classify them by Emergency, Critical, High, Medium and Low risk categories.
 </li>
 <li>
 Prioritize vulnerabilities based on criticality, CVSS, exploitability, asset criticality and business impact.
 </li>
 <li>
 Coordinate remediation actions with patch engineers and IT MGMT. teams, including patching, configuration recommendations, cleanup/removal actions and compensating control follow-up where applicable.
 </li>
 <li>
 Track vulnerability closure, ageing, exceptions, risk acceptance and remediation blockers through the agreed tracking solution.
 </li>
 <li>
 Validate patch deployment on target servers and endpoints using available tools and evidence from operational checks.
 </li>
 <li>
 Prepare weekly and monthly technical and management reports covering vulnerability posture, patch compliance and AV patch status.
 </li>
 <li>
 Support audits, compliance activities, service reviews and continuous improvement initiatives.
 </li>
 <li>
 Escalate items requiring SME advice, vendor support, application validation, local hands support or out-of-scope troubleshooting to the appropriate IT MGMT. owner.
 </li>
 </ul>
 
 
 
 
 
 Qualifications
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Information Security, or related field.
 </li>
 <li>
 7+ years of experience in vulnerability management, IT security, or infrastructure security roles.
 </li>
 <li>
 Hands-on experience with Qualys VMDR or equivalent vulnerability management platforms.
 </li>
 <li>
 Strong understanding of CVSS scoring, exploitability analysis, and risk-based prioritization.
 </li>
 <li>
 Proven ability to manage remediation governance in regulated environments.
 </li>
 <li>
 Excellent communication and reporting skills for both technical and executive audiences.
 </li>
 </ul>
 
 
 
 
 
 Key Skills
 
 
 <ul>
 <li>
 Qualys VMDR / Vulnerability Reporting
 </li>
 <li>
 Vulnerability Management Lifecycle
 </li>
 <li>
 CVSS and Risk-Based Prioritization
 </li>
 <li>
 Windows and Linux Security
 </li>
 <li>
 Patch Compliance Reporting
 </li>
 <li>
 Threat and Exploitability Awareness
 </li>
 <li>
 Risk Acceptance and Exception Tracking
 </li>
 <li>
 Audit and Compliance Support
 </li>
 </ul>
 
 
 
 
 
 
</div>

Vulnerability Management Lead

<div>
 
 For a well-known Islamic Bank in Bahrain, we are looking for an experienced IT Infrastructure. The successful candidate will be responsible for administering, maintaining, and supporting enterprise infrastructure environments, including Windows and Linux servers, virtualization platforms, backup solutions, storage systems, and Citrix environments. The role requires strong troubleshooting skills, system monitoring expertise, and the ability to support business-critical systems in a banking environment.
 
 
 
 
 
 
 Key Responsibilities
 
 
 <ul>
 <li>
 Administer and maintain Windows Server environments.
 </li>
 <li>
 Manage and support Linux server infrastructure.
 </li>
 <li>
 Perform Citrix administration and troubleshooting.
 </li>
 <li>
 Manage enterprise backup solutions and recovery processes.
 </li>
 <li>
 Administer storage systems and virtualization platforms.
 </li>
 <li>
 Support and maintain Nutanix infrastructure.
 </li>
 <li>
 Manage and monitor IT systems using ManageEngine and related tools.
 </li>
 <li>
 Maintain infrastructure AMC contracts and coordinate with vendors.
 </li>
 <li>
 Review and implement technical service requests and infrastructure changes.
 </li>
 <li>
 Support IT security requirements and ensure compliance with organizational policies.
 </li>
 <li>
 Monitor system performance and proactively resolve infrastructure issues.
 </li>
 </ul>
 
 
 
 
 
 Qualifications
 
 
 <ul>
 <li>
 Bachelor's Degree in Computer Science, Information Technology, or a related field.
 </li>
 <li>
 4&ndash;6 years of experience in IT Infrastructure administration, preferably within the banking or financial services sector.
 </li>
 <li>
 Strong expertise in Windows Server Administration, Linux Administration, and Citrix Administration. Hands-on experience with backup and recovery solutions, storage administration, server virtualization, and Nutanix infrastructure management.
 </li>
 <li>
 Solid understanding of client-server computing, networking fundamentals, IT security principles, and infrastructure monitoring.
 </li>
 <li>
 Strong troubleshooting, performance optimization, and incident resolution skills.
 </li>
 <li>
 Experience with enterprise monitoring and administration tools including ManageEngine, Veeam Backup, PRTG Network Monitor, and Nexthing.
 </li>
 <li>
 Proficiency in Microsoft Office 365 administration and support.
 </li>
 <li>
 Fluent in English and Arabic, both written and spoken
 </li>
 </ul>
</div>

Information Technology Infrastructure Specialist

<div>
 
 For a
 
 well-known Islamic Bank in Kuwait
 
 , we are hiring an AI Penetration Tester to join VMPT team and lead hands-on security testing for LLM/GenAI, ML, and AI-enabled applications (chatbots, RAG, AI agents, model APIs, and AI-assisted business workflows). The role blends traditional penetration testing + secure code review + vulnerability assessment with AI red teaming focused on modern AI risks such as prompt injection and insecure output handling as documented by OWASP&rsquo;s Top 10 for LLM Applications.
 
 
 Candidate is expected to have experience in assessing
 
 Python-based AI development and Azure AI / Azure OpenAI / Microsoft Foundry-hosted model endpoints
 
 .
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 
 AI / LLM penetration Testing &amp; Red Teaming
 
 
 <ul>
 <li>
 Plan and execute AI penetration tests for LLM/GenAI and ML solutions across the bank (AI apps, AI gateways, model endpoints, orchestration layers, RAG pipelines, plugins/tools).
 </li>
 <li>
 Design test cases aligned to OWASP Top 10 for LLM Applications (e.g., prompt injection, insecure output handling, sensitive info disclosure, supply-chain risks).
 </li>
 <li>
 Perform adversarial testing using threat-informed techniques and references such as MITRE ATLAS (adversary tactics/techniques for AI systems).
 </li>
 <li>
 Validate security of agentic workflows (tool invocation, function calling, permissions, memory, connectors) and verify least privilege + authorization boundaries.
 </li>
 </ul>
 
 
 Automation &amp; Tooling
 
 
 <ul>
 <li>
 Build Python-based test harnesses for repeatable AI security testing (fuzzing prompts, jailbreak suites, regression tests, evaluation scoring).
 </li>
 <li>
 Use and extend PyRIT (Python Risk Identification Tool) or equivalent frameworks to probe for jailbreaks/harms and automate adversarial scanning.
 </li>
 <li>
 Where applicable, leverage Microsoft Foundry capabilities such as the AI Red Teaming Agent (preview) that integrates PyRIT red teaming features.
 </li>
 </ul>
 
 
 Secure code review &amp; AppSec
 
 
 <ul>
 <li>
 Conduct secure code review (particularly Python) for AI application layers: prompt templates, RAG retrieval logic, output post-processing, input validation, secrets handling, authZ checks, and logging.
 </li>
 <li>
 Identify and help fix design flaws enabling data leakage, prompt manipulation, unsafe tool usage, or insecure output flows.
 </li>
 </ul>
 
 
 Traditional PT
 
 
 <ul>
 <li>
 Perform web/API/cloud penetration testing for AI-enabled applications (auth, session, API abuse, SSRF, injection, misconfigurations, secrets).
 </li>
 <li>
 Run vulnerability assessments, triage findings, define severity, and validate remediation (re-test).
 </li>
 </ul>
 
 
 
 
 
 Education and Qualification
 
 
 <ul>
 <li>
 Bachelor&rsquo;s degree in computer science, Cybersecurity, Software Engineering, or related discipline.
 </li>
 <li>
 3&ndash;7 years in penetration testing / application security / red teaming.
 </li>
 <li>
 Demonstrated experience testing LLM/GenAI systems (prompt injection, jailbreaks, data exfiltration patterns, agent/tool abuse).
 </li>
 <li>
 Strong hands-on Python for security automation and test harness development.
 </li>
 <li>
 Practical experience with Azure security concepts (identity, networking, secrets, logging) and exposure to Azure AI / Azure OpenAI / Foundry style deployments.
 </li>
 <li>
 Strong report writing, clear communication, ability to work with developers on remediation.
 </li>
 </ul>
 
 
 A Must Certificates (at least one)
 
 
 <ul>
 <li>
 OffSec OSCP / OSCP+
 </li>
 <li>
 GIAC GPEN
 </li>
 <li>
 Microsoft Certified: Azure Security Engineer Associate (AZ-500)
 </li>
 <li>
 ISC2 CCSP
 </li>
 </ul>
 
 
 Strongly Preferred
 
 
 <ul>
 <li>
 OffSec OSWE (advanced web exploitation / white-box testing)
 </li>
 <li>
 Burp Suite Certified Practitioner (BSCP)
 </li>
 <li>
 Microsoft Certified: Azure AI Engineer Associate (AI-102) (helps align with Azure AI implementation patterns).
 </li>
 </ul>
 
 
 Tools &amp; Technologies Skills
 
 
 <ul>
 <li>
 Python, Git, CI/CD integration
 </li>
 <li>
 Burp Suite, common PT toolchains (Kali, scanners, API tooling)
 </li>
 <li>
 Azure security controls (identity, key management, logging/monitoring)
 </li>
 <li>
 AI red teaming tooling (e.g., PyRIT / Foundry scans)
 </li>
 </ul>
 
 
</div>

AI Penetration Testing Specialist

<div>
 
 We are looking for a skilled Outsystems Developer (IB/MB) to join a leading Bank in Bahrain. The role involves designing, developing, and deploying web and mobile applications using Outsystems technologies, with a strong focus on banking solutions. The ideal candidate will bring expertise in low-code development, API integration, and DevOps practices, while ensuring high-quality delivery aligned with business and security requirements.
 
 
 
 
 
 Key Responsibilities
 
 <ul>
 <li>
 Develop mobile applications using Outsystems.
 </li>
 <li>
 Build traditional and reactive web applications with Outsystems.
 </li>
 <li>
 Manage application deployment through Outsystems LifeTime DevOps tools.
 </li>
 <li>
 Design and implement user interfaces using CSS, jQuery, and Javascript.
 </li>
 <li>
 Develop and integrate RESTful APIs and SOAP APIs within Outsystems.
 </li>
 <li>
 Perform SQL database development and integration.
 </li>
 <li>
 Review technical service requests and assess business/security changes.
 </li>
 </ul>
 
 
 
 
 Required Qualifications
 
 <ul>
 <li>
 Bachelor&rsquo;s Degree in Computer Science (BE in Computer Science &amp; Engineering).
 </li>
 <li>
 4&ndash;6 years of experience, preferably in Banking and Compliance.
 </li>
 <li>
 Professional Training: Applications Development Outsystems.
 </li>
 <li>
 Professional Qualification: Outsystems LowCode Development.
 </li>
 <li>
 Outsystems application development (Web &amp; Mobile) and SDLC Experience
 </li>
 <li>
 Proficiency in CSS, HTML, Javascript, jQuery, and Databases
 </li>
 <li>
 Understanding of Networking concepts
 </li>
 <li>
 Experience in banking application development
 </li>
 <li>
 Familiarity with Outsystems LifeTime DevOps tools
 </li>
 <li>
 Knowledge of XML, JSON, SoapUI, Postman, and WebService development
 </li>
 <li>
 Certification: Outsystems.
 </li>
 </ul>
 
 
</div>

Outsystems Developer (Banking Sector)

Join International Turnkey Systems - ITS and explore 4   exciting career opportunities. They're hiring for various roles with options for remote or on-site work. Apply today and become part of their innovative team.

International Turnkey Systems - ITS

About Company

Vulnerability Management Lead

Information Technology Infrastructure Specialist

AI Penetration Testing Specialist

Outsystems Developer (Banking Sector)