Vulnerability Security Engineer

VINCI Energies Oil & Gas; Abu Dhabi; Híbrido; AED 180.000 - 320.000; Jornada completa

Descripción de la vacante

VINCI Energies Oil & Gas seeks a Vulnerability Security Engineer to support a client by identifying and prioritizing security vulnerabilities across IT, cloud, and OT environments in Abu Dhabi.

You will manage scanning platforms, coordinate remediation activities, validate fixes, and maintain dashboards and risk reports, contributing to continuous improvement of vulnerability management within a global organisation.

Formación

• 2–5 years of relevant cybersecurity experience is required.
• Hands-on vulnerability assessment and management experience.
• Familiarity with CVE/CVSS scoring and remediation tracking is expected.

Responsabilidades

• Conduct vulnerability assessments across IT, cloud, and OT environments.
• Manage and tune vulnerability scanning platforms and schedules.
• Prioritize risks and coordinate remediation with owners and teams.
• Maintain dashboards and reports for risk and remediation status.

Conocimientos

Cybersecurity

Vulnerability assessment

Vulnerability scanning

Networking basics

Educación

Bachelor's degree in cybersecurity/IT/computer science

Herramientas

Tenable Nessus

Qualys

Rapid7

Microsoft Defender Vulnerability Management

Descripción del empleo

Axians Emirates, an operational entity of Cegelec Abu Dhabi (a subsidiary of VINCI Energies), delivers a wide range of ICT solutions and services, covering telecommunications, IT infrastructure, cybersecurity, and digital transformation.

Our expertise spans the design, engineering, integration, and deployment of Telecom, IT, and Cybersecurity solutions, as well as specialized consulting services in Cybersecurity and Digital Transformation, helping organizations strengthen their security posture and modernize their operations.

Beyond project delivery, we also provide IT Managed Services, taking responsibility for the day-to-day operation, maintenance, support, and continuous improvement of our clients' IT infrastructure and systems.

With a strong presence in critical sectors, including oil & gas and defense, Axians Emirates combines technical expertise, consulting capabilities, and long-term operational support to deliver solutions tailored to each client's needs.

We are seeking a Vulnerability Security Engineer to support one of our clients in managing cybersecurity vulnerabilities across IT infrastructure, applications, cloud environments and, where applicable, OT systems. The role involves conducting vulnerability assessments, managing scanning platforms, prioritizing security risks, coordinating remediation activities, and ensuring continuous monitoring and reporting of vulnerabilities.

Responsibilities

• Perform vulnerability assessments and manage regular security scans across IT infrastructure, applications, cloud and relevant OT environments.
• Analyze and prioritize identified vulnerabilities based on severity, exploitability, asset criticality and business impact.
• Administer and maintain vulnerability scanning platforms, including scan configurations, schedules, asset coverage and troubleshooting.
• Coordinate with IT, security and system owners to track remediation activities, follow up on outstanding findings and ensure timely resolution.
• Validate remediation actions through rescanning and appropriate verification methods.
• Monitor emerging vulnerabilities, security advisories and threat intelligence, escalating critical risks when necessary.
• Maintain vulnerability dashboards, risk registers and remediation reports, providing clear updates to technical teams and management.
• Support vulnerability risk assessments, security exceptions, audits and continuous improvement of vulnerability management processes.

Requirements

• 2–5 years of relevant experience in cybersecurity, with hands-on exposure to vulnerability assessment and management.
• Bachelor's degree in cybersecurity, IT, computer science or a related field.
• Practical experience with vulnerability scanning tools such as Tenable Nessus, Qualys, Rapid7 or Microsoft Defender Vulnerability Management.
• Good understanding of vulnerability management processes, CVE/CVSS scoring, risk prioritization and remediation tracking.
• Solid knowledge of IT infrastructure, networking, Windows/Linux systems and common security vulnerabilities.
• Familiarity with cybersecurity frameworks and standards such as ISO 27001, NIST CSF or CIS Controls.
• Exposure to cloud security, scripting/automation or OT/ICS environments would be an advantage.
• Relevant cybersecurity certifications such as CompTIA Security+, CySA+, CEH or equivalent would be an advantage.

Why join us ?

Our DNA: Trust, Entrepreneurial Spirit, Solidarity, Autonomy, Responsibility

Joining us means becoming part of a large group while enjoying the agility and warmth of a human-sized company!

A personalized onboarding journey from day one, with tailored career follow-up

Opportunities for growth, training, and mobility within a fast-growing international group

Close and supportive management

Recognition of employee performance through a company savings plan

Pride in shared achievements

Respect for the environment and local communities in the countries where we operate (Human Rights Guide)

Commitment to the health and safety of our employees

At VINCI Energies Oil & Gas, CSR initiatives are deeply embedded in our activities, our ways of working, and ultimately, in our DNA