Cybersecurity Vulnerability Management & Assurance Specialist- Qatar

1. Vulnerability Management

• Perform regular vulnerability scans using tools such as Nessus, Qualys, or equivalent
• Conduct authenticated and unauthenticated scans across infrastructure
• Validate and eliminate false positives

2. Vulnerability Analysis & Risk Prioritization

• Analyze vulnerabilities using CVSS scoring
• Prioritize based on:
• Business criticality
• Asset exposure (internet-facing/internal)
• Exploit availability

3. Remediation Tracking & Coordination

• Work closely with IT teams (server, network, application) for remediation
• Track vulnerabilities via ticketing tools (e.g., ServiceNow, Jira)
• Ensure closure within defined SLAs
• Escalate overdue critical risks

4. Reporting & Assurance

• Prepare vulnerability reports for technical teams and management
• Provide dashboards, trends, and risk posture updates
• Support compliance with standards such as ISO/IEC 27001, NIST

5. Security Awareness & Training

• Conduct training sessions for IT teams and end user on:
• Security awareness
• Secure configuration practices
• Patch management
• Vulnerability mitigation techniques

🔹 Required Skills & Experience

Technical Skills

• Hands-on experience with vulnerability scanning tools (Nessus, Qualys, etc.)
• Good understanding of:
• OS (Windows/Linux) vulnerabilities
• Network and web application security basics
• Knowledge of:
• CVE
• Patch & vulnerability management processes
• Security best practices