Vulnerability Management Specialist

Overview

This role involves comprehensive management of vulnerability assessment across various platforms, including VA (Tenable), web applications (Acunetix), and mobile applications (Appknox). The position is based in Abu Dhabi and requires immediate or short notice availability, with a contract potentially extendable beyond one year. The salary offered ranges from AED 13000 to AED 14000 per month.

Key Responsibilities

• Manage end-to-end vulnerability scanning processes and platform administration across Tenable, Acunetix, and Appknox tools.
• Regularly conduct vulnerability assessments on enterprise environments using Tenable Security Center.
• Configure and refine scanning policies, schedules, repositories, and scan zones for optimal performance.
• Execute both authenticated and unauthenticated vulnerability scans and validate identified issues.
• Analyze vulnerabilities by considering factors such as CVSS scoring, exploitability potential, threat intelligence, and criticality of assets.
• Develop prioritized remediation roadmaps based on risk assessment.
• Work closely with infrastructure, cloud, application, and security teams to ensure effective remediation implementation.
• Monitor remediation timelines and provide executive-level dashboards and reports.
• Support compliance and audit processes related to ISO 27001, NIST, CIS, and PCI-DSS standards.
• Continuously enhance vulnerability management workflows and incorporate automation where feasible.

Candidate Profile and Qualifications

• Minimum of 4 years' relevant experience in vulnerability management or working within large-scale ICT environments focusing on cybersecurity.
• Bachelor’s degree in engineering, computer science, information systems, or related quantitative disciplines.
• Possession of certifications such as CompTIA Security+, EC-Council Certified Ethical Hacker (CEH), and Tenable VM Specialist.
• Proficient with Tenable Security Center software and a strong grasp of vulnerability lifecycle management.
• Understanding of vulnerability scoring and frameworks including CVE, CVSS, CWE, and MITRE ATT&CK.
• Experience working with diverse systems including Windows, Linux, networking hardware, cloud environments, and virtualization technologies.
• Excellent analytical skills combined with strong reporting and stakeholder communication capabilities.

Additional Information

• The recruitment process is expedited due to the urgency of this hiring.
• Only candidates fulfilling the essential criteria and genuinely interested should apply; irrelevant applications may not be considered.
• Notice period requirement is immediate or up to one month maximum.