vulnerability management specialist

Starlink Qatar

<div>
 
 We are looking for a highly skilled
 
 Senior SOC Engineer
 
 to lead security monitoring, incident response, detection engineering, and vulnerability management initiatives. This role requires strong hands-on expertise in SIEM/XDR, threat hunting, and risk-based vulnerability management.
 
 
 
 
 
 
 Key Responsibilities
 
 
 
 
 
 
 Security Monitoring &amp; Incident Response
 
 <ul>
 <li>
 Lead security incident investigations and provide technical expertise
 </li>
 <li>
 Perform real-time monitoring across SIEM, XDR, NDR, OT &amp; cloud platforms
 </li>
 <li>
 Conduct root cause analysis (RCA) and document lessons learned
 </li>
 <li>
 Coordinate containment, eradication &amp; recovery activities
 </li>
 <li>
 Ensure SLA &amp; KPI adherence
 </li>
 </ul>
 
 Detection Engineering &amp; Use Case Management
 
 <ul>
 <li>
 Develop and tune SIEM/XDR correlation rules aligned with MITRE ATT&amp;CK
 </li>
 <li>
 Reduce false positives &amp; enhance detection coverage
 </li>
 <li>
 Implement advanced use cases (ransomware, insider threats, APTs, data exfiltration)
 </li>
 <li>
 Log source onboarding, parser development &amp; normalization
 </li>
 <li>
 Optimize alert thresholds and detection logic
 </li>
 </ul>
 
 Vulnerability Management
 
 <ul>
 <li>
 Lead end-to-end vulnerability lifecycle (discovery &rarr; remediation validation)
 </li>
 <li>
 Risk-based prioritization using CVSS, asset criticality &amp; business impact
 </li>
 <li>
 Correlate vulnerabilities with threat intelligence
 </li>
 <li>
 Validate remediation via rescans &amp; penetration testing support
 </li>
 <li>
 Develop executive dashboards &amp; risk exposure reports
 </li>
 </ul>
 
 Threat Hunting &amp; Intelligence
 
 <ul>
 <li>
 Conduct proactive hypothesis-driven threat hunting
 </li>
 <li>
 Integrate threat intelligence feeds into SIEM/XDR
 </li>
 <li>
 Track emerging TTPs and refine detection strategies
 </li>
 <li>
 Support adversary simulation exercises
 </li>
 </ul>
 
 Reporting &amp; Stakeholder Management
 
 <ul>
 <li>
 Vulnerability tracking &amp; SLA breach reporting
 </li>
 <li>
 Monthly risk &amp; trend analysis
 </li>
 <li>
 Patch compliance &amp; remediation validation reporting
 </li>
 <li>
 Audit &amp; compliance documentation support
 </li>
 </ul>
 
 
 Education
 
 
 
 Bachelor&rsquo;s degree in Cybersecurity, Information Security, Computer Science, or related field
 
 
 📜
 
 Mandatory Certification (Any One Required)
 
 
 <ul>
 <li>
 Tenable Certified Nessus Professional (TCNP)
 </li>
 <li>
 Tenable Certified Security Center (TCSC)
 </li>
 <li>
 Qualys Certified Specialist &ndash; VMDR
 </li>
 <li>
 Qualys Certified Specialist &ndash; Web Application Scanning (WAS)
 </li>
 </ul>
 
 ⭐
 
 Preferred Certifications
 
 
 <ul>
 <li>
 CEH
 </li>
 <li>
 Microsoft Certified: Security Operations Analyst (SC-200)
 </li>
 <li>
 OSCP
 </li>
 </ul>
 
 💡
 
 Required Skillset
 
 
 <ul>
 <li>
 Hands-on SIEM, XDR/EDR, NDR, SOAR &amp; cloud security monitoring
 </li>
 <li>
 Strong understanding of MITRE ATT&amp;CK &amp; threat hunting
 </li>
 <li>
 Full vulnerability lifecycle management expertise
 </li>
 <li>
 SOC use case tuning &amp; automation
 </li>
 <li>
 Knowledge of ISO 27001, NIST CSF frameworks
 </li>
 <li>
 Experience with Tenable, Qualys, Rapid7, Acunetix, Burp Suite
 </li>
 <li>
 Basic scripting (PowerShell / Python / KQL / SPL)
 </li>
 <li>
 Strong reporting &amp; stakeholder communication skills
 </li>
 </ul>
 
 
</div>

Senior SOC Engineer

Arrowstreet Capital LP

<div>Job Overview
We are seeking a Vulnerability Analyst to support and operate our enterprise vulnerability management program as part of the Cybersecurity team. This role responsible for technical vulnerability analysis, risk-based prioritization, and remediation alignment using enterprise vulnerability platform and supporting tools.
Responsibilities:
<ul><li>Operate and manage our enterprise vulnerability management platform, including vulnerability discovery, analysis, and lifecycle management.
</li><li>Triage and prioritize vulnerabilities using CVSS scoring frameworks in conjunction with internal risk methodologies, threat context, and asset criticality.
</li><li>Analyze vulnerabilities in the context of known exploits, bugs, and active threat activity.
</li><li>Apply attack frameworks (e.g., MITRE ATT&amp;CK) to evaluate potential attacker techniques, attack paths, and exposure impact.
</li><li>Define and maintain technical reporting criteria that align vulnerabilities with appropriate remediation teams and the target operating model.
</li><li>Partner with infrastructure, application, and platform teams to drive remediation outcomes.
</li><li>Validate findings and investigate false positives through system, service, and configuration review.
</li><li>Operate comfortably in Linux-based environments, including command-line troubleshooting and service inspection.
</li><li>Troubleshoot, optimize, and implement technical configurations and plugin modifications to enhance scanning processes and improve outcomes.
</li><li>Participate in the Cybersecurity team&rsquo;s on-call and escalation rotation.
</li></ul>Qualifications:
<ul><li>3&ndash;5 years of hands-on cybersecurity experience, preferably in vulnerability management or security engineering.
</li><li>Experience operating vulnerability scanning platforms such as TenableOne Nessus, Rapid7 InsightVM, OpenVAS and/or Qualys VMDR.
</li><li>Strong working knowledge of Vulnerabilities, exploits, and common attack vectors, CVSS scoring and risk-based prioritization, Linux operating systems and command-line tools as well as MITRE ATT&amp;CK framework or similar attack frameworks.
</li><li>Ability to translate technical vulnerability data into actionable remediation guidance.
</li><li>Ability to define, measure, and report on key risk indicators (KRIs) and key performance indicators (KPIs).
</li></ul>In addition, experience with any of the following would be valuable:
<ul><li>Exposure to red team, purple team, or offensive security activities.
</li><li>Experience mapping vulnerabilities to attacker techniques or simulating adversary behaviour.
</li><li>Familiarity with threat intelligence or exploit research.
</li><li>AWS/Azure cloud or hybrid environment exposure.
</li><li>Scripting or automation experience (Python, Bash) is a plus.
</li><li>Understanding of FAIR framework or similar methodologies is a plus.
</li><li>Experience with CSPM or similar technologies is a plus.
</li></ul>The base salary range for this position is $80,000 - $135,000 per year.
Arrowstreet Capital operates a robust talent acquisition program, and we also seek to compensate and reward our employees competitively within our industry and in line with our merit-based culture. Our approach to total compensation includes base salaries and annual discretionary bonuses, as well as a robust benefits package. The determination of a successful candidate&rsquo;s base salary placement within the listed range will vary based on the candidate&rsquo;s relevant experience and qualifications (which may also include relevant certifications, credentials and other education), the job responsibilities and scope, the commensurate resulting level of the position and other relevant factors. The listed range is also an estimate, and additional information regarding base salary and other elements of total compensation offered by Arrowstreet Capital to successful applicants will be communicated during the recruitment process.
Arrowstreet Capital is a Boston-based systematic investment firm that manages global equity portfolios for institutional investors around the world.
All qualified applicants will receive consideration for employment without regard to sex, race, color, religion, national origin, ancestry, genetic information, age, pregnancy, medical condition, disability, veteran or military status, marital status or any other characteristic protected by federal, state, or local law.
Arrowstreet Capital is committed to working with and providing reasonable accommodations for qualified individuals with disabilities and disabled veterans. If you need a reasonable accommodation for any part of the employment process due to a disability, contact us to discuss the nature of your request and contact information.</div>

Vulnerability Analyst

Advansys ME

Advansys is a dynamic solutions provider focused on delivering smart, modular, and sustainable technology solutions that enhance operations, improve customer experiences, and drive business modernization. With over 400 skilled engineers, we serve 100+ enterprise customers across 14 countries. Specialized in a wide array of premium services including Business Automation, Industrial Digitization, Low code Development, Cloud Services, Warehouse Automation & Strategic Outsourcing.
 
Founded in 2014, Advansys is part of the INTRO Group, a private conglomerate established in 1980 with diverse investments across different business areas, oil and gas, real estate, specialized engineering, financial investment, Food & manufacturing.
 
We are looking for a Senior Cybersecurity Penetration Tester to manage vulnerability assessments and perform penetration testing across enterprise environments to identify and mitigate security risks.
 
Key Responsibilities: 
Lead the end-to-end vulnerability management lifecycle (identification, assessment, prioritization, remediation, and reporting).
 Perform regular vulnerability scans using tools such as Qualys and Tenable.
 Analyze risks based on CVSS, exploitability, asset criticality, and threat intelligence.
 Coordinate with IT teams to ensure timely remediation and patching.
 Plan and execute penetration testing for networks, applications, systems, and cloud environments.
 Simulate real-world attack scenarios to identify security weaknesses.
 Prepare clear technical and executive reports with findings and remediation recommendations.
 Requirements
 5+ years of experience in vulnerability management and penetration testing.
 Hands-on experience with industry-standard security tools.
 Strong knowledge of network, system, web, and cloud security.
 Relevant certifications (OSCP, CEH, or similar) are a plus.
 Benefits
 
<ul>
<li>Hybrid Working model</li>
<li>Social and Medical insurance</li>
<li>Transportation and Transportation allowance</li>
<li>Internet Package</li>
</ul>

Senior Cybersecurity - Penetration Tester

Advansys

<div>Advansys is a dynamic solutions provider focused on delivering smart, modular, and sustainable technology solutions that enhance operations, improve customer experiences, and drive business modernization. With over 400 skilled engineers, we serve 100+ enterprise customers across 14 countries. Specialized in a wide array of premium services including Business Automation, Industrial Digitization, Low code Development, Cloud Services, Warehouse Automation &amp; Strategic Outsourcing.
Founded in 2014, Advansys is part of the INTRO Group, a private conglomerate established in 1980 with diverse investments across different business areas, oil and gas, real estate, specialized engineering, financial investment, Food &amp; manufacturing. 
 
We are looking for a Senior Cybersecurity Penetration Tester to manage vulnerability assessments and perform penetration testing across enterprise environments to identify and mitigate security risks. 
Key Responsibilities:<ul><li>
Lead the end-to-end vulnerability management lifecycle (identification, assessment, prioritization, remediation, and reporting).
</li><li>Perform regular vulnerability scans using tools such as Qualys and Tenable.
</li><li>Analyze risks based on CVSS, exploitability, asset criticality, and threat intelligence.
</li><li>Coordinate with IT teams to ensure timely remediation and patching.
</li><li>Plan and execute penetration testing for networks, applications, systems, and cloud environments.
</li><li>Simulate real-world attack scenarios to identify security weaknesses.
</li><li>Prepare clear technical and executive reports with findings and remediation recommendations.</li></ul> 

Requirements 
<ul><li>
5+ years of experience in vulnerability management and penetration testing.
</li><li>Hands-on experience with industry-standard security tools.
</li><li>Strong knowledge of network, system, web, and cloud security.
</li><li>Relevant certifications (OSCP, CEH, or similar) are a plus.</li></ul> 

Benefits<ul><li> 
Hybrid Working model</li><li>Social and Medical insurance</li><li>Transportation and Transportation allowance</li><li>Internet Package</li></ul></div>

Elfonze Technologies

<div><div><h3 class="jobSectionHeader">Job Information</h3>
<ul><div>Date Opened
<div>02/17/2026
</div></div><div>Job Type
<div>Full time
</div></div><div>Industry
<div>IT Services
</div></div><div>Remote Job
</div></ul></div><div><h3 class="jobSectionHeader">Job Description</h3>
<div>This is a remote position.
<div>Job Summary:
 
*Deep technical knowledge* of the OWASP Top 10, Cloud Security Posture Management (CSPM), CVSS scoring, and software supply chain security.
 
 
*Lead DevSecOps Advocacy and Training:* Provide clear guidance to Engineering and Product teams to foster a culture of shared security responsibility
 
 
*Embed Security into CI/CD Pipelines:* Partner with DevOps teams to integrate &quot;shift-left&quot; controls, quality gates, and automated security testing (SAST/SCA/IaC) into actions,
 
 
*Build DevSecOps Dashboards and Reporting:* Develop executive-level KPIs/KRIs covering vulnerability aging, MTTR (Mean Time to Remediate), pipeline pass/fail rates, and measurable risk reduction across the enterprise
 
 
*Own software supply chain security (SCA):* Utilize JFrog Xray for policy enforcement, including vulnerable dependency detection, license governance, and automated blocking of malicious components within the artifact repository.
 
 
*Drive Static Analysis (SAST) and Code Quality:* Use SonarQube to partner with development teams, reducing critical/high findings and implementing sustainable coding standards that are integrated directly into the developer's IDE and pull request workflow.
 
 
*Conduct Dynamic Testing (DAST):* Coordinate testing using Burp Suite to validate exploitability and reproduce issues, while working to automate baseline DAST scans within the CI/CD pipeline.
 
 
*Lead the end-to-end vulnerability lifecycle:* discovery, triage, risk assessment, prioritization, remediation tracking, validation, and closure across Azure cloud environments.
 
 
*Operate and optimize Microsoft Defender for Cloud (Azure Defender) and Defender fo Endpoint:* Improve cloud security posture, reduce misconfigurations, and drive remediation across compute, networking, storage, identity, and container workloads (AKS/OCR).
 
 
{*}Infrastructure-as-Code (IaC) security : D{*}efining and enforcing policies for Terraform, ARM templates, or Bicep.
 
Job Title:
 
Security Architect - Hybrid
 
Minimum Qualifications and Job Requirements:
 
5- 7 years of Application security and Vulnerability management experience
 
 
*Certifications (one or more highly preferred):*
 
<ul><li>CEH
 </li><li>OSCP
 </li><li>CSSLP
 </li><li>GWAPT</li></ul></div></div></div></div>

Security Operations Support

Orange Egypt

<div>
 
 Purpose of the job
 
 
 
 To manage and support Information security technology TOOLS, to meet organizational needs.
 
 
 
 Duties and Responsibilities:
 
 
 
 <ul>
 <li>
 Installing and configuring Information security control tools
 </li>
 <li>
 Troubleshoot raised issues from implementation team
 </li>
 <li>
 Collaborate with infrastructure and application teams to ensure availability requirements are met
 </li>
 <li>
 Work with vendors to solve the raised problems from implementation team
 
 
 
 </li>
 </ul>
 
 Job Specification
 
 
 
 
 Education:
 
 
 
 <ul>
 <li>
 Bachelors degree in engineering or computer science from a recognized university.
 
 
 
 </li>
 </ul>
 
 Experience:
 
 
 
 <ul>
 <li>
 Minimum 4 - 6 years of experience in administrating information security controls
 </li>
 <li>
 Proven experience working with endpoint managing systems.
 </li>
 <li>
 Proven experience with Vulnerability management tools.
 </li>
 <li>
 Experience with PAM &amp; IAM solutions
 </li>
 <li>
 Experience two factor authentications solutions
 
 
 
 </li>
 </ul>
 
 Skills and Abilities:
 
 
 
 <ul>
 <li>
 Very good English both spoken and written
 </li>
 <li>
 Strong Customer Orientation
 </li>
 <li>
 Strong communication, listening &amp; interpersonal skills
 </li>
 <li>
 Flexibility &amp; ability to work in a team
 </li>
 <li>
 Self-confident with professional behavior &amp; attitude
 </li>
 <li>
 Excellent problem-solving and troubleshooting skills
 
 </li>
 </ul>
</div>

Information Security Supervisor

BWX Technologies

<div>At BWX Technologies, Inc. (NYSE: BWXT), we are People Strong, Innovation Driven. A U.S.-based company, BWXT is a Fortune 1000 and Defense News Top 100 manufacturing and engineering innovator that provides safe and effective nuclear solutions for global security, clean energy, environmental restoration, nuclear medicine and space exploration. With more than 7,800 employees, BWXT has 14 major operating sites in the U.S., Canada and the U.K. We are the sole manufacturer of naval nuclear reactors for U.S. submarines and aircraft carriers. Our company supplies precision manufactured components, services and fuel for the commercial nuclear power industry across four continents. Our joint ventures provide environmental restoration and operations management at a dozen U.S. Department of Energy and NASA facilities. BWXT&rsquo;s technology is driving advances in medical radioisotope production in North America and microreactors for various defense and space applications. For more information, visit www.bwxt.com. Follow us on LinkedIn, X, Facebook and Instagram. 
Welcome to BWXT
 
We believe in empowering our employees and cultivating a dynamic workplace that fosters growth and collaboration. Whether you&rsquo;re an experienced professional or just starting your career, you'll find opportunities to challenge yourself, learn from seasoned experts, and contribute to nuclear innovation. We require a diverse range of skills to support our work in the markets that drive our business and welcome candidates from all backgrounds and life stages who are passionate about making a difference. 


Position Overview:
This role supports strengthening cybersecurity by assisting in vulnerability management, incident response, and threat detection. It involves implementing security measures and conducting site assessments to protect people and technology. Collaboration with physical security and IT teams ensures effective handling of security challenges, turning data into actionable insights. Key responsibilities include driving remediation efforts, documenting findings, and helping design exercises to test security readiness. This position offers an opportunity to develop skills, contribute to a dynamic security program, and stay ahead of emerging cyber threats. The work directly impacts the organization&rsquo;s resilience and safety. The selected candidate will report directly to the Information System Security Manager while supporting the Technical Security Program (TSP), Information System Security Officer (ISSO), and Cyber Security Engineers. 


Location:
On-site in Erwin, Tennessee. 


Your Day to Day as a Cyber Security Analyst:
<ul><li>Support Cyber Security program efforts in the areas of Vulnerability Assessment and Remediation, Access Control and Authorization, Policy Enforcement, Application Security, Incident Response, and Threat Detection.</li>
<li>Assist with the implementation and maintenance of the site Technical Security Program, including prevention and detection technologies (e.g., cell phone detectors and spectrum analyzers), performing walk-downs and site audits, conducting annual assessments, etc.</li>
<li>Perform assessments and inspections of electronic hardware, equipment, and tools (e.g. items that arrive in the warehouse and medical devices) to evaluate for unauthorized technologies.</li>
<li>Work closely with site Physical Security personnel for any events/incidents related to Incidents of Security Concern (IOSCs).</li>
<li>Analyze, report, and escalate actionable threats based on security data from multiple heterogenous security tools deployed on the network(s).</li>
<li>Follow procedures and defined work processes with Security Information and Event Management (SIEM) and Antivirus alerting, triage, and escalation.</li>
<li>Assist with security controls assessments.</li>
<li>Execute remediation efforts for security events.</li>
<li>Document and communicate findings and after-action reports.</li>
<li>Assist with simulation exercise creation to test the effectiveness of the program.</li>
<li>Collaborate with other IT teams to resolve security vulnerabilities and strengthen security posture.</li>
<li>Generate reports, documentation, and producing metrics to support cybersecurity efforts.</li>
<li>Support ongoing cyber security projects through various other duties as assigned.</li>
<li>Stay updated on emerging threats and vulnerabilities in the cybersecurity landscape.</li></ul> 


Required Minimum Qualifications:
<ul><li>Bachelor&rsquo;s degree in a related Information Technology field.</li>
<li>At least 6 years of relevant experience.
</li><li>Must be able to maintain confidentiality when working with sensitive information.</li>
<li>Strong understanding of security tools and technologies.</li>
<li>Fundamental understanding of networks/networking concepts, vulnerability scanning tools, and digital forensics toolkits.</li>
<li>Familiarity with Windows operating systems, Active Directory, and Group Policy Objects.</li>
<li>Must have strong analytical and problem-solving skills with excellent attention to detail and the ability to manage multiple tasks simultaneously under pressure.</li>
<li>Effective communication and documentation abilities.</li>
<li>Must be a U.S. Citizen.</li>
<li>Must have or be able to obtain and maintain a DOE Q security clearance.</li></ul> 


Preferred Additional Qualifications
<ul>
<li>Current DOE Q security clearance.</li></ul> 


What We Offer:
<ul><li>Competitive salary and benefits package, including health, dental, and retirement plans.</li>
<li>Flexible work schedules and paid time off to promote a healthy work-life balance.
</li><li>Professional development opportunities, including mentorship programs and sponsorship for continuing education.</li>
<li>An inclusive atmosphere that celebrates new perspectives and supports collaboration between different generations.</li>
<li>The chance to be part of a mission-driven organization making a positive impact on the future of energy.
</li><li>Opportunities for continuous learning and training to grow throughout your career!
</li></ul>Pay: $76,000 - $119,000 


The base salary range for this position in Tennessee (US-TN) at the start of employment is expected to be between $76,000 and $119,000 per year. However, the base salary offered is based on local job market factors, and may vary further depending on factors specific to the selected job candidate, such as job-related knowledge, skills, experience, and other objective business considerations. Subject to these considerations, the total compensation package for this position may also include other elements, such as an annual cash incentive in addition to a full range of medical, retirement, and/or other benefits. Details of participation in these benefit plans will be provided at such time the selected job candidate receives an offer of employment. If hired, the selected job candidate will be employed 'at-will,&rsquo; unless employed at a location and in a position subject to a collective bargaining agreement. The company further reserves the right to modify base salary (as well as any other discretionary payment, compensation or benefit program) at any time, including for reasons related to individual performance, company or individual department/team performance, and other market factors. 


As a federal government contractor, BWX Technologies, Inc. and any subsidiaries, affiliates and related entities (&ldquo;BWXT&rdquo; or the &ldquo;Company&rdquo;) complies with all federal, state, and local laws and customer requirements regarding health and safety protocols. As such, all BWXT new hires will be required to adhere to applicable Company health and safety requirements within the workplace as a condition of employment. 


Applicants selected will be subject to a Federal background investigation and must meet eligibility requirements for access to classified information or matter. Position requires U.S. citizenship with (no dual citizenship) ability to obtain and maintain a Department of Energy (DOE) security clearance which involves an extensive criminal and financial background investigation, drug test and previous employment reference verifications. 


BWXT is committed to the concept of Equal Employment Opportunity. We have established procedures to ensure that all personnel actions such as recruitment, compensation, career development, benefits, company-sponsored training and social recreational programs are administered without regard to race, color, religion, sex, national origin, citizenship, age, disability, protected veteran or other protected status. 


BWX Technologies, Inc. and its affiliates and subsidiaries (BWXT) is not responsible for and does not accept any liability for fees or other costs associated with resumes or candidates presented by recruiters or employment agencies, unless a binding, written recruitment agreement between BWXT and the recruiter or agency exists prior to the presentation of candidates or resumes to BWXT and includes the specific services, job openings, and fees to be paid (&ldquo;Agreement&rdquo;). BWXT may consider any candidate for whom a recruiter or agency has submitted an unsolicited resume and explicitly reserves the right to hire such candidate(s) without any financial obligation to the recruiter or agency unless an Agreement is in place prior to presentation and such Agreement explicitly encompasses the job opening for which such fees or costs are sought. An email, verbal or other informal contact with any person within BWXT will not create a binding agreement. Agencies or recruiters without an Agreement are directed not to contact any hiring managers of BWXT with recruiting inquiries or resumes. Recruiters and agencies interested in partnering with BWXT may contact BWXT&rsquo;s Talent Acquisition team at talent_acquisition@bwxt.com.</div>

Cyber Security Analyst

Search 10000+ Vulnerability management specialist jobs near you this March. New roles added regularly across leading industries. Apply today.

10000 vulnerability management specialist jobs Near Me

Senior SOC Engineer

Vulnerability Analyst

Senior Cybersecurity - Penetration Tester

Senior Cybersecurity - Penetration Tester

Security Operations Support

Information Security Supervisor

Cyber Security Analyst