vulnerability management specialist

Xenon7

<div><p><b>Location:</b> Cairo, Egypt (100% On-Premise)</p><p><b>
Contract Duration:</b> 6 Months (Extendable)</p><p><b>
Employment Type:</b> Contract</p><p></p><p><b>
About us:</b></p><p>
Where elite tech talent meets world-class opportunities!</p><p>
At Xenon7, we work with leading enterprises and innovative startups on exciting, cutting-edge projects that leverage the latest technologies across various domains of IT including Data, Web, Infrastructure, AI, and many others. Our expertise in IT solutions development and on-demand resources allows us to partner with clients on transformative initiatives, driving innovation and business growth. Whether it's empowering global organizations or collaborating with trailblazing startups, we are committed to delivering advanced, impactful solutions that meet today&rsquo;s most complex challenges.</p>
About the Client:<p>
Join one of Egypt&rsquo;s premier financial institutions, renowned for its extensive suite of banking services, including Institutional Banking, Personal Banking, and Islamic Banking. With a global presence through over 50 branches and correspondents, we serve a diverse and dynamic clientele. As we embark on a groundbreaking digital transformation journey, we are committed to leveraging the latest technologies to establish a state-of-the-art data architecture that will redefine our performance and service delivery.</p>
Job Summary:<p>
This role covers highly technical disciplines within InfoSec: security architecture, engineering review, and the maturation of vulnerability and patch management systems. The specialist works closely with internal Security Architecture managers and the Security Operations Center (SOC) team to strengthen the bank's detection and defensive posture, ensure new infrastructure designs are secure by design, and fully operationalize the vulnerability management lifecycle.</p>
Key Responsibilities:<p>
A. Security Architecture &amp; Engineering Assessment</p><ul><li>Review new and changed system designs, network architectures, and digital platform builds from an</li></ul><p>
information security perspective, prior to build or procurement approval.</p><ul><li>Produce Security Architecture Review Reports with risk-rated findings, threat model summaries, and</li></ul><p>
design recommendations aligned to security standards and CBE requirements.</p><ul><li>Assess security of APIs, cloud components, integration layers, and digital banking platforms (mobile,</li></ul><p>
internet banking, payment processing) against OWASP, NIST, and CBE guidelines.</p><ul><li>Maintain an architecture review register tracking all submitted designs, decisions, and open risk items.</li><li>Contribute to the InfoSec reference architecture and security design patterns library.</li></ul><p>
B. Tenable SC &mdash; Vulnerability &amp; Patch Management</p><ul><li>Take ownership of Tenable Security Center (SC) and other vulnerability solutions configuration, scan</li></ul><p>
policy design, and coverage assurance across full asset inventory.</p><ul><li>Design and implement a structured vulnerability management workflow &mdash; scan, triage, risk-rate, assign,</li></ul><p>
track, and verify remediation &mdash; integrated with IT's patch management process.</p><ul><li>Produce weekly and monthly vulnerability dashboards for IT and InfoSec leadership showing patch SLA</li></ul><p>
compliance, critical exposure trends, and remediation velocity.</p><ul><li>Define and enforce scan coverage SLAs: all in-scope assets scanned at appropriate frequency per asset</li></ul><p>
criticality tier.</p><ul><li>Identify and escalate monitoring blind spots &mdash; unscanned, uncredentialed, or unreachable assets &mdash; and</li></ul><p>
drive resolution with IT.</p><ul><li>Enable Tenable SC reporting to feed directly into KRI metrics for board-level visibility on patch SLA</li></ul><p>
breach rate and vulnerability exposure.</p><b><br>
Requirements</b><p></p><ul><li><br>
Minimum 8 years in information security with strong hands-on technical depth across at least two of the</li></ul><p>
three disciplines in this role.</p><ul><li>Proven Tenable SC (or Tenable.io) administration and workflow design experience &mdash; must be able to</li></ul><p>
demonstrate scan configuration, policy tuning, and dashboard creation.</p><ul><li>Experience conducting security architecture reviews for banking or financial sector projects.</li><li>Practical threat hunting experience using SIEM and EDR platforms with documented hunt outputs.</li><li>Familiarity with MITRE ATT&amp;CK framework and its application to threat hunting and detection</li></ul><p>
engineering.</p><p></p><p><b>
Preferred Certifications</b></p><ul><li>Tenable Certified Security Engineer (TCSE) or Tenable.sc Specialist</li><li>GIAC Certified Enterprise Defender (GCED) or GIAC Certified Threat Intelligence Analyst (GCTI)</li><li>CISSP &mdash; Certified Information Systems Security Professional</li><li>SABSA Chartered Security Architect (SCF or SCP)</li></ul><p></p><p><b>
Preferred Experience</b></p><ul><li>Experience in Egyptian banking or financial institution regulated by CBE.</li><li>Hands-on with F5 AWAF, Palo Alto, or equivalent network/application security controls from an</li></ul><p>
assessment perspective.</p><ul><li>Familiarity with NIST CSF 2.0 and CBE Cybersecurity Framework control domains.</li></ul><b><br>
Benefits</b><br>
<ul><li><b>
Attractive, market-leading salary package</b></li><li><b>
Clear career advancement path with professional development opportunities</b></li></ul></div>

Security Architecture, Engineering & Threat Operations Lead - Banking

geidea

<div>
 <p>
  Established in 2008, Geidea epitomises customer focused empowerment and commercial success through continuous innovation
 </p>
 <p>
  Geidea makes best in class digital payment solutions available for all by attracting and leveraging the best creative &amp; entrepreneurial talent in the market Our solutions give any business the chance to get ahead and reach for more no matter their size or maturity. Our technology mirrors our people - Smart, Innovative &amp; Forward Thinkiking
 </p>
 <p>
  To maintain competitive advantage as we grow, we are currently looking for a new "
  <strong>
   Cybersecurity Defense Expert"
  </strong>
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Job purpose:
  </strong>
 </p>
 <p>
  The purpose of this role is to lead the defense against cyber threats through proactive SOC Monitoring, DFIR, Threat Intelligence, and Vulnerability Management, ensuring the integrity, confidentiality, and availability of information systems in all regions.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Key accountabilities and decision ownership:
  </strong>
 </p>
 <ul>
  <li>
   Lead and enhance SOC operations, focusing on real-time threat detection, incident response, and continuous monitoring.
  </li>
  <li>
   Coordinate digital forensics and incident response efforts to mitigate threats efficiently and reduce recovery time.
  </li>
  <li>
   Develop and implement a threat intelligence program to identify and counteract evolving cyber threat
  </li>
  <li>
   Manage the Vulnerability Management Program, including regular assessments, risk prioritization, and remediation strategies.
  </li>
  <li>
   Support the cybersecurity vision and strategy in alignment with defense operations and organizational goals.
  </li>
  <li>
   Oversee information security audits, whether by performed by organization or third-party personnel.
  </li>
  <li>
   Lead integration of standard and non-standard logs in SIEM.
  </li>
  <li>
   Create reports, dashboards, metrics for SOC operations and presentation to Senior Management.
  </li>
  <li>
   Lead team &amp; vendor management overall use of resources and initiation of corrective action where required for Security Operations Center.
  </li>
  <li>
   Develop and maintain enterprise Threat &amp; Vulnerability Management framework and necessary program operational capabilities that include identify, risk assess, and monitor of vulnerability and associated remediation.
  </li>
  <li>
   Maintain control effectiveness and continuously identify gaps in detection controls across the environment, including Geidea&rsquo;s cloud environments.
  </li>
  <li>
   Serve as the process owner of all ongoing activities related to the confidentiality, integrity and availability of information and resources of customers, business partners, employees, and business information, in compliance with the organization's Cyber and Information security policies.
  </li>
  <li>
   Evaluate team performance and build on people capabilities.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Must have technical / professional qualifications:
  </strong>
 </p>
 <ul>
  <li>
   2-3 years of experience
  </li>
  <li>
   Bachelor&rsquo;s degree in computer science, Information Technology, Telecommunications, Electronics &amp; Electrical or any related field.
  </li>
  <li>
   Certifications:
  </li>
  <li>
   GCIH
  </li>
  <li>
   GCFA
  </li>
  <li>
   Experience in cybersecurity architecture design.
  </li>
  <li>
   Experience in NESA IAR, SAMA CSF, PCI-DSS, NCA is a must.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  Our values guide how we think and act - They describe what we care about the most.
 </p>
 <p>
  <strong>
   Customer first
  </strong>
  - It&rsquo;s embedded in our design thinking and customer service approach.
 </p>
 <p>
  <strong>
   Open
  </strong>
  - Openness allows us to constantly improve and evolve.
 </p>
 <p>
  <strong>
   Real
  </strong>
  - No jargon and no excuses!
 </p>
 <p>
  <strong>
   Bold
  </strong>
  - Constantly challenging ourselves and our way of thinking.
 </p>
 <p>
  <strong>
   Resilient
  </strong>
  &ndash; If we fail, we bounce back stronger than before.
 </p>
 <p>
  <strong>
   Collaborative
  </strong>
  - We know that we can achieve a lot more as a team.
 </p>
 <p>
  We are changing lives by constantly striving for a better solution.
 </p>
 <p>
  Click apply below and become part of the Geidea story
 </p>
</div>


Cybersecurity Defense Expert

U.S. Financial Technology

<div>OVERVIEW:<div></div><div><b><br>
The Company</b></div><div></div><div><br>
U.S. Financial Technology (U.S. FinTech) is seeking an experienced Lead, Security Engineer Vulnerability and Configuration Management to join our team of talented professionals. This is a full-time remote opportunity.</div><div></div><div><br>
U.S. FinTech built and operates the largest and most advanced mortgage securitization platform in the world, supporting the Uniform Mortgage-Backed Security (UMBS) of Fannie Mae and Freddie Mac.</div><div></div><div><br>
Supporting 70% of the mortgage-backed securities in the market, U.S. FinTech provides best-in-class single-family issuance, bond administration, disclosure, and tax services. We support a broad portfolio of products for our clients with full lifecycle management.</div><div></div><div><br>
Our market-leading, cloud-based, end-to-end platform executes transactions on an extraordinary scale which has bolstered liquidity in the secondary mortgage market, one of the largest and most important financial markets in the world. Our unique approach to securitization combines the best minds in financial services with the know-how, flexibility, and innovation of leading technologists.</div>
RESPONSIBILITIES :<p></p><p><b><br>
Job Information</b></p><div><br>
The Lead Vulnerability and Compliance Analyst main responsibilities would be to act as a Subject Matter Expert for all programs within the VCM space. This would include conducting comprehensive vulnerability assessments using tools such as Wiz and Tenable. Leverage strong analytical and problem-solving skills to identify weaknesses in US FinTech&rsquo;s IT Infrastructure. Communicate findings effectively, via reports/meetings to prioritize vulnerability remediation. Utilize the developed processes to track, prioritize, and ensure remediation of found vulnerability and compliance issues. Continuous monitor US FinTech infrastructure for Vulnerability and Compliance related issues. Make Improvements to monitors, scans, dashboards, and reporting. Ability to work independently and in a team environment, collaborate effectively with other InfoSec Teams and IT Infrastructure teams. Eager to learn and adapt to emerging cloud technologies and tools in a fast-paced environment.</div><p><b><br>
Key Job Functions</b></p><ul><li>
Vulnerability Assessment</li><li>
Act as a Subject Matter Expert for the VCM program, processes, and tooling.</li><li>
Configure, tune, and maintain vulnerability management tools</li><li>
Work with Security Architecture on new build outs, new business, new technologies, new environments to ensure coverage of VCM programs, processes, and tooling.</li><li>
Build out new Security baselines for CIS, DISA STIG, and custom baselines.</li><li>
Correlate Vulnerabilities with threat intelligence to assess exploitability and risk. Work with Cyber Security Operations Center to ensure mitigations are in place while vulnerabilities are being remediated</li><li>
Provide detailed risk assessments for discovered vulnerabilities.</li><li>
Enforce remediation timelines in accordance with Standard Operating Procedures.<ul><li>
Remediation Tracking &amp; Reporting</li></ul></li><li>
Collaborate with IT and DevOps teams to ensure timely remediation of vulnerabilities</li><li>
Conduct regular and ad-hoc vulnerability scans using tools like Wiz or Tenable</li><li>
Integrate tools with all cloud environments. Ensure complete coverage of all IT environments.</li><li>
Ensure alignment with internal security policies, regulatory requirements (NIST/SOC), and industry best practices.</li><li>
Support audits and assessments by providing evidence and documentation.<ul><li>
Stakeholder Engagement</li></ul></li><li>
Act as a liaison between security, IT, development, and risk teams</li><li>
Provide clear, actionable recommendations tailored to technical and non-technical audiences.<ul><li>
Mentor Junior Analysts</li></ul></li><li>
Provide guidance and training to junior members of the VCM team.<ul><li>
Process Improvements</li></ul></li><li>
Identify potential gaps in the vulnerability or compliance management programs and propose improvements.</li><li>
Develop and maintain Standard Operating Procedures, Frameworks, and Job Aids/HowTos.</li></ul>
QUALIFICATIONS:<p></p><p><b><br>
Education</b>
</p><ul><li>Bachelor's Degree or equivalent required.BA/BS degree in Computer Science, Information Systems, Cyber Security or a related technical field. Master&rsquo;s Degree is a plus.</li></ul><div></div><p><b><br>
Minimum Experience</b></p><p><br>
</p><ul><li>Minimum of 7 years of experience with security engineering and operations, as well as experience managing and supporting large, complex mission-critical systems and with Vulnerability management tools, patching processes and tools, VM operation/workflow, or configuration/Baseline/File-integrity monitoring applications and processes.</li><li>
Applicants must be authorized to work in the US without requiring employer sponsorship currently or in the future. U.S. FinTech does not offer H-1B sponsorship for this position.</li></ul><div></div><div><b><br>
Specialized Knowledge &amp; Skills</b><br>
</div><div></div><ul><li>Subject matter expert of cloud based critical infrastructure systems and security threats for these systems (AWS Cloud experience required)</li><li>
Subject matter expert with cyber security in the domains of vulnerability and compliance management.</li><li>
Familiarity with latest security vulnerabilities, advisories, incidents, penetration techniques, understanding of attacks, and determination of countermeasures.</li><li>
Subject matter expert of network and system vulnerabilities, malware, networking protocols, multi-tiered applications, and attack methods to exploit vulnerabilities.</li><li>
Experience in senior technical security role, including network security, operating system security, Internet or Web security, and vulnerability testing.</li><li>
Strong knowledge of networking fundamentals such as TCP/IP and basic packet analysis, network engineering, and local and wide area (LAN/WAN) technologies and topologies.</li><li>
Must have experience conducting comprehensive vulnerability assessments with vulnerability monitoring tools (Wiz and Tenable).</li><li>
General knowledge and experience in Windows / Linux Operating Systems, baseline security configurations, audit, forensics, Patch Management for these OSs.</li><li>
Experience developing Standard Operating Procedures (SOPs), job aids, and hands-on training materials.</li><li>
Be able to work in fast paced environment with occasional on-call activities.</li><li>
Excellent interpersonal skills, presentation skills, and verbal / written communication skills.</li><li>
Self-starter; adaptable to change; motivated to set personal and program goals and pro-actively track performance against goals and initiatives.</li><li>
Ability to manage multiple priorities &ndash; projects, deliverables, and stakeholders.</li><li>
Ability to influence peers and management; ability to team cross-functionally and form relationships to achieve objectives.</li><li>
Active in the security industry; equipped with external networking relationships to maintain relevant knowledge of best practices, tactics, strategies and technologies.</li><li>
AWS Security, AWS Architect certifications desired.</li></ul><div>
Pay Range $156,500 to $181,000</div><div>
U.S. FinTech's pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) a candidate&rsquo;s qualifications, skills, competencies, and experience, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law. U.S. FinTech offers a competitive total compensation package, which includes a performance bonus, 401k match, healthcare coverage, PTO, and a broad range of other benefits.</div><div></div><p><b><br>
Employment</b></p><p>
As a condition of employment with U.S. Financial Technology, any successful job applicant will be required to successfully complete a background investigation, which may also include a credit check for positions in some areas of our business.<br>
</p><p></p><p>U.S. Financial Technology is an Equal Opportunity Employer.</p><p></p><p><br>
##LI-Remote</p></div>

Lead, Security Engineer V&CM

Leidos

<div><p><b>Description</b>
</p><p>We modernize today's systems to outsmart tomorrow's challenges. Come #OutsmartOutdo at Leidos!</p><p></p><p>
The TS/SCI cleared <b>ACAS Administrator</b> shall support the Client in the design and implementation of Assured Compliance Assessment Solution (ACAS) for the client's networks. The Administrator will train operators and Information Assurance personnel to maintain and operate ACAS tool functionality.</p><p>
This is a mid-to-senior level role requiring demonstrated leadership in vulnerability management operations within DoD environments and will require to perform job duties onsite at <b>Langley Air Force Base, VA.
</b></p><p></p><p><b>Roles and Responsibilities</b></p><ul><li><p>
Assess current ACAS implementations for each network and recommend improvements to scanning coverage, architecture, and policy configuration.</p></li><li><p>
Document the design of the ACAS solution for each network.</p></li><li><p>
Lead and guide team members in troubleshooting and resolving operational issues within the ACAS environment.</p></li><li><p>
Develop reporting dashboard designs and reports tailored for three audiences: Leadership; Cybersecurity Staff; and System Administrators.</p></li><li><p>
Generate, analyze, and present vulnerability assessment reports and risk mitigation updates to and ISSMs/ISSOs.</p></li><li><p>
Ensure networks receive timely updates from the DISA/DoD Patch Repository or Tenable; implement and track IAVA compliance.</p></li><li><p>
Implement reporting dashboard designs and generate environment-specific compliance and vulnerability reports.</p></li><li><p>
Verify scheduled scans achieve required coverage of intended assets and complete successfully; remediate scan failures.</p></li><li><p>
Maintain Nessus scanner, Nessus Agents, Nessus Network Monitor, and PVS connectivity with the associated Security Center (SC) across Linux and Windows environments.</p></li><li><p>
Create and manage ACAS organizations, repositories, and scan zones; import, upload, and validate scan results.</p></li><li><p>
Coordinate with ISSMs, ISSOs, system owners, and administrators to drive vulnerability remediation efforts and track POA&amp;M items.</p></li><li><p>
Ensure ACAS operations remain compliant with DoD security policies and DISA STIGs.</p></li></ul><p></p><p><b>
Basic Qualifications:</b></p><ul><li><p>
Bachelor's degree in Computer Science, Cybersecurity, Information Technology, or a related field - or additional years of equivalent hands-on experience will be considered in lieu of a degree.</p></li><li><p><b>
Active DoD Top Secret/SCI clearance required.</b></p></li><li><p><b>
Active DoD 8570/8140 IAT Level III or IAM Level II certification: CISA, GSE, SCNA, CISSP (or Associate), CAP, GSLC, or CISM.</b></p></li><li><p>
Foundational security certification such as CompTIA Security+ required as a baseline if higher certifications are in progress.</p></li><li><p><b>
ACAS official training.</b></p></li><li><p>
3+ years of hands-on ACAS and/or Nessus administration experience in a DoD or federal environment.</p></li><li><p>
5+ years supporting, configuring, and administering Red Hat Enterprise Linux (RHEL) in an enterprise environment.</p></li><li><p>
Experience with DoD Risk Management Framework (RMF) and eMASS, including developing RMF packages and maintaining Plan of Action &amp; Milestones (POA&amp;M).</p></li><li><p>
Demonstrated experience managing vulnerability scanning across large enterprise networks with 1,000+ assets.</p></li><li><p>
Experience with virtualized environments (VMware or equivalent).</p></li><li><p>
ACAS Security Center (SC), Nessus Vulnerability Scanners (NVS), and Passive Vulnerability Scanner (PVS) administration.</p></li><li><p>
Red Hat Enterprise Linux (RHEL) - installation, hardening, and maintenance.</p></li><li><p>
Application of DISA STIGs and SCAP compliance tooling.</p></li><li><p>
IAVA Management, Implementation, and remediation tracking.</p></li><li><p>
Experience with eMASS for artifact submission, control compliance, and system authorization packages.</p></li><li><p>
Working knowledge of NIST SP 800-37/800-53 and DoDI 8510.01 RMF processes.</p></li><li><p>
Familiarity with OPORD/FRAGO support and military operations security requirements.</p></li></ul><p><br>
</p><p><b>Preferred Qualifications</b></p><ul><li><p>
Scripting proficiency in NASL, Python, or Bash for scan automation and report customization.</p></li><li><p>
Experience with PVS deployment, tuning, and passive network traffic analysis.</p></li><li><p>
Familiarity with DISA/DoD Patch Repository processes and Tenable plugin/feed update workflows.</p></li><li><p>
Experience presenting technical findings and risk summaries to executive and non-technical audiences.</p></li><li><p>
Exposure to SIEM platforms (e.g., Splunk, Security Onion) and integration with ACAS scan data.</p></li><li><p>
Experience with Microsoft Visio for network architecture and ACAS component diagramming.</p></li><li><p>
Knowledge of SE Linux, AppArmor, or other access control frameworks.</p></li><li><p>
Familiarity with cloud environments (AWS GovCloud or Azure Government) and scanning in hybrid infrastructure.</p></li></ul><p></p><p>
#DINM</p><p>
DABAOPP1</p><p></p><p>
If you're looking for comfort, keep scrolling. At Leidos, we outthink, outbuild, and outpace the status quo &mdash; because the mission demands it. We're not hiring followers. We're recruiting the ones who disrupt, provoke, and refuse to fail. Step 10 is ancient history. We're already at step 30 &mdash; and moving faster than anyone else dares.</p><h2 class="jobSectionHeader"><b>
Original Posting:</b></h2>
June 11, 2026<p></p><p><br>
For U.S. Positions: While subject to change based on business needs, Leidos reasonably anticipates that this job requisition will remain open for at least 3 days with an anticipated close date of no earlier than 3 days after the original posting date as listed above.</p><p></p><h2 class="jobSectionHeader"><b><br>
Pay Range:</b></h2>
Pay Range $87,100.00 - $157,450.00<p></p><p>
The Leidos pay range for this job level is a general guideline only and not a guarantee of compensation or salary. Additional factors considered in extending an offer include (but are not limited to) responsibilities of the job, education, experience, knowledge, skills, and abilities, as well as internal equity, alignment with market data, applicable bargaining agreement (if any), or other law.</p><p></p><p><b>
About Leidos</b></p><p></p><p>
Leidos is an industry and technology leader serving government and commercial customers with smarter, more efficient digital and mission innovations. Headquartered in Reston, Virginia, with 47,000 global employees, Leidos reported annual revenues of approximately $16.7 billion for the fiscal year ended January 3, 2025. For more information, visit www.Leidos.com.</p><p></p><p><b>
Pay and Benefits</b></p><p></p><p>
Pay and benefits are fundamental to any career decision. That's why we craft compensation packages that reflect the importance of the work we do for our customers. Employment benefits include competitive compensation, Health and Wellness programs, Income Protection, Paid Leave and Retirement. More details are available at www.leidos.com/careers/pay-benefits.</p><p></p><p><b>
Securing Your Data</b></p><p></p><p>
Beware of fake employment opportunities using Leidos&rsquo; name. Leidos will never ask you to provide payment-related information during any part of the employment application process (i.e., ask you for money), nor will Leidos ever advance money as part of the hiring process (i.e., send you a check or money order before doing any work). Further, Leidos will only communicate with you through emails that are generated by the Leidos.com automated system &ndash; never from free commercial services (e.g., Gmail, Yahoo, Hotmail) or via WhatsApp, Telegram, etc. If you received an email purporting to be from Leidos that asks for payment-related information or any other personal information (e.g., about you or your previous employer), and you are concerned about its legitimacy, please make us aware immediately by emailing us at LeidosCareersFraud@leidos.com.</p><p>
If you believe you are the victim of a scam, contact your local law enforcement and report the incident to the U.S. Federal Trade Commission.</p><p></p><p><b>
Commitment to Non-Discrimination</b></p><p></p><p>
All qualified applicants will receive consideration for employment without regard to sex, race, ethnicity, age, national origin, citizenship, religion, physical or mental disability, medical condition, genetic information, pregnancy, family structure, marital status, ancestry, domestic partner status, sexual orientation, gender identity or expression, veteran or military status, or any other basis prohibited by law. Leidos will also consider for employment qualified applicants with criminal histories consistent with relevant laws.</p></div>

ACAS Administrator (TS/SCI clearance)

One World International School

<p></p><div><div><div><div><div><div>UAE
</div><div>Full-Time
</div><div></div><ul><div><div>1st Jun 2026
</div></div><div><div><div>39<br>
</div>
<div>applications</div></div></div></ul></div><p><br>
</p></div></div></div><div></div><div><div><b>Qualifications</b></div><ul><li>
B.Sc ,B.Tech ,B.E ,BCA</li></ul></div><div><div><b>
Overview</b></div><ul><div><div>
The Senior IT &amp; Infrastructure Administrator is responsible for managing the organization's IT ecosystem, including network infrastructure, cloud platforms, cybersecurity, enterprise applications, physical security systems, technology procurement, asset management, and vendor relationships. This role leads infrastructure projects, automates IT operations, ensures system security and availability, and provides technical support across the organization.</div></div></ul></div><div><div><b>
Responsibilities</b></div><ul><div><ul><div>
Manage IT procurement, hardware/software assets, license renewals, vendor contracts, and SLA compliance.</div><div>
Configure and maintain enterprise networks, including switches, firewalls, VLANs, VPNs, wireless infrastructure, and ISP connectivity.</div><div>
Administer physical security systems including IP CCTV, NVRs, biometric attendance systems, RFID solutions, access control systems, and PA/intercom systems.</div><div>
Design, deploy, and support cloud environments including Microsoft 365, Google Workspace, IAM, SSO, and tenant migrations.</div><div>
Provide technical administration and support for ERP systems and business-critical applications.</div><div>
Develop and maintain PowerShell automation scripts to streamline IT operations and reporting.</div><div>
Perform vulnerability assessments, patch management, cybersecurity monitoring, and security compliance activities.</div><div>
Lead large-scale technology deployments, infrastructure upgrades, and organization-wide IT projects.</div><div>
Ensure high availability, performance, and security of all IT infrastructure and services.</div></ul></div></ul></div><div><div><b>
Skills Description</b></div><ul><div><ul><div>
Bachelor's degree in Computer Science, Information Technology, BCA, or related field.</div><div>
Strong experience with enterprise networking, switching, routing, firewalls, VLANs, VPNs, and wireless infrastructure.</div><div>
Hands-on expertise with Microsoft 365, Google Workspace, cloud administration, and identity management.</div><div>
Experience managing IP CCTV, NVR systems, access control, biometric devices, and low-voltage infrastructure.</div><div>
Proficiency in PowerShell scripting and IT process automation.</div><div>
Knowledge of cybersecurity best practices, vulnerability management, and infrastructure hardening.</div><div>
Experience supporting ERP systems and enterprise applications.</div><div>
Proven ability to manage IT procurement, budgets, vendor relationships, contracts, and software renewals.</div><div>
Strong troubleshooting, project management, and communication skills.</div></ul><div></div><div><br>
Preferred Certifications</div><ul><div>
Cisco CCNA</div><div>
Microsoft Azure Fundamentals (AZ-900)</div><div>
Microsoft 365 Fundamentals (MS-900)</div><div>
Microsoft Certified Technology Specialist (MCTS)</div></ul></div></ul></div><div></div><div><div><b><br>
Skills</b></div><ul><div><p>
IT Administration</p></div></ul></div></div><p></p>

Snr Executive-Admin IT

Bowhead

<div>Overview:
<p>
CLOUD ACCELERATION SERVICES AND CYBERSECURITY BUSINESS ENTERPRISE SYSTEMS (CASBES):</p><p></p><p><br>
Bowhead seeks individuals to network with, in effort to support the Cloud Acceleration Services (CAS) and Cybersecurity Business Enterprise Systems contract located in Montgomery, AL. The mission of this contract is to provide comprehensive cloud and cybersecurity services to modernize, standardize, secure and enhance its information technology (IT) infrastructure, platforms, and mission applications.</p>
Responsibilities:
<p>
Positions available include:</p><br>
<p></p><ul><li>
Senior Cloud Engineer</li><li>
Cloud Migration Engineer</li><li>
Cloud Operations Engineer</li><li>
Information System Security Officer (ISSO)</li><li>
Security Control Assessor Representative (SCAR)</li><li>
RMF Analyst</li><li>
Cybersecurity Analyst</li><li>
Vulnerability Management Analyst</li><li>
Identity and Access Management (IAM) Engineer</li><li>
DevSecOps Engineer</li><li>
Software Developer III</li><li>
Software Developer II</li><li>
Platform Engineer</li><li>
Database Administrator</li><li>
Data Migration Specialist</li><li>
Quality Assurance/Test Lead</li><li>
Test Automation Engineer</li><li>
Agile Scrum Master</li><li>
Technical Writer</li><li>
Training Specialist</li></ul>
Qualifications:
<ul><li>Required education, years of experience, and certifications will vary based on position requirements</li><li>
Intermediate to advanced level skills in networking and systems administration with Windows and/or Linux environments</li><li>
Intermediate to advanced level skills with any of the following Cisco, Juniper, Palo Alto products</li><li>
Experience using scanning tools such as HBSS, NESSUS, Nmap, Splunk, Elastic</li><li>
Experience working with SDREN or DREN networks preferred</li><li>
Ability to communicate effectively</li><li>
Strong interpersonal skills and good judgment with the ability to work alone or as part of a team</li></ul><p></p><p><br>
Physical Demands:</p><br>
<p></p><ul><li>
Must be able to lift up to 20 pounds</li><li>
Must be able to stand and walk for prolonged amounts of time</li><li>
Must be able to twist, bend and squat periodically</li></ul><p></p><p><br>
SECURITY CLEARANCE REQUIREMENTS: Must currently hold a security clearance at the Secret level. US Citizenship is a requirement for Secret clearance at this location.</p></div>

Cloud Acceleration Services and Cybersecurity Business Enterprise Systems

4P Consulting Inc.

<div><div>Vulnerability Assessment Analyst IV &ndash; Container Security &amp; Exposure Management
<p><b>Location: </b>Birmingham, AL or Atlanta, GA
<br>
<b>Client: </b>Southern Company Services
<br>
<b>Contract Duration: </b>15 Months
<br>
<b>Work Schedule: </b>Hybrid &ndash; 4 days onsite
<br>
<b>Experience: </b>10+ Years
</p><h2 class="jobSectionHeader"><b>Job Summary
</b></h2><p>We are seeking an experienced <b>Vulnerability Assessment Analyst IV </b>to support container security and exposure management within a cybersecurity organization. This role will focus on identifying, validating, and assessing security vulnerabilities across IT/OT systems, cloud-native platforms, Kubernetes, OpenShift, Docker, container images, clusters, pipelines, and supporting infrastructure.
</p><p>The ideal candidate will have strong hands-on experience with vulnerability assessment, container security, DevSecOps, exposure management, attack path analysis, scripting, and risk reporting.
</p><h2 class="jobSectionHeader"><b>Key Responsibilities
</b></h2><ul><li>Identify and assess security vulnerabilities across IT and OT systems.
</li><li>Perform vulnerability scans and analyze exposures in web applications, networks, systems, embedded devices, firmware, and containerized environments.
</li><li>Evaluate container security risks across Kubernetes, OpenShift, Docker, AKS, EKS, GKE, and similar platforms.
</li><li>Assess container images, base images, dependencies, Kubernetes manifests, Helm charts, runtimes, RBAC, network policies, secrets handling, and cluster configurations.
</li><li>Validate exposure paths and determine real-world exploit potential.
</li><li>Conduct attack path mapping and prioritize high-risk vulnerabilities.
</li><li>Support exposure management operations, including data review, reporting, trend analysis, remediation tracking, and escalation.
</li><li>Partner with platform, infrastructure, application, DevOps, and security teams to recommend practical mitigation strategies.
</li><li>Monitor emerging threats, zero-days, CVEs, and exploitation methods.
</li><li>Translate technical findings into clear business risk summaries for stakeholders and leadership.
</li></ul><h2 class="jobSectionHeader"><b>Required Qualifications
</b></h2><ul><li>10+ years of experience in cybersecurity, vulnerability assessment, exposure management, DevSecOps, infrastructure security, or related roles.
</li><li>Bachelor&rsquo;s degree in Computer Science, Cybersecurity, or equivalent experience.
</li><li>Strong experience with Kubernetes, OpenShift, Docker, AKS, EKS, GKE, or similar container platforms.
</li><li>Ability to assess vulnerabilities in container images, dependencies, manifests, Helm charts, runtimes, and cluster configurations.
</li><li>Knowledge of container security controls such as image scanning, least privilege, non-root containers, secrets handling, RBAC, pod security standards, network policies, and runtime monitoring.
</li><li>Experience with vulnerability management, attack surface management, cloud security posture management, and exposure management.
</li><li>Proficiency with scripting languages such as Python, PowerShell, or Bash.
</li><li>Familiarity with OWASP methodologies and common application/system vulnerabilities.
</li><li>Experience with SIEM platforms for detection validation and log analysis.
</li><li>Strong analytical, troubleshooting, communication, and documentation skills.
</li><li>Must pass NERC CIP and Insider Threat Protection background checks.
</li></ul><h2 class="jobSectionHeader"><b>Preferred Qualifications
</b></h2><ul><li>Experience in DevSecOps, application security, offensive security, penetration testing, adversarial threat simulation, or container platform engineering.
</li><li>Certifications such as CKS, CKAD, CKA, OSCP, CEH, GSEC, CISSP, or CISA.
</li><li>Experience supporting IT and OT security environments.
</li><li>Experience working with cloud-native enterprise systems and CI/CD pipelines.
</li></ul><h2 class="jobSectionHeader"><b>Key Skills
</b></h2><p>Vulnerability Assessment, Container Security, Exposure Management, Kubernetes, OpenShift, Docker, DevSecOps, IT/OT Security, Cloud Security, Attack Path Mapping, Vulnerability Management, SIEM, OWASP, RBAC, Image Scanning, Runtime Monitoring, Python, PowerShell, Bash, CI/CD Security, Risk Reporting.</p></div></div>

Vulnerability Assessment Analyst IV 4P/715

Search 10000+ Vulnerability management specialist jobs near you this June. New roles added regularly across leading industries. Apply today.