Vulnerability Assessment Specialist

Yasser Haikal Auditing & Accounting; Doha; On-site; QAR 180,000 - 300,000; Full time

Job summary

Yasser Haikal Auditing & Accounting is seeking a skilled Vulnerability Assessment Specialist to identify and report security vulnerabilities across networks, systems, applications, and cloud environments, with remediation recommendations. The role requires collaboration with IT and security teams to ensure timely fixes and ongoing compliance.

The ideal candidate will hold a Bachelor’s degree in a related field, at least 3 years of vulnerability assessment experience, and strong knowledge of OS,

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or related field.
• Minimum 3 years of experience in vulnerability assessment, penetration testing, or cybersecurity.
• Strong understanding of TCP/IP, networking, operating systems, web technologies, and common security vulnerabilities.
• Hands-on experience with vulnerability assessment tools such as Tenable Nessus, Qualys, Rapid7 InsightVM, or similar.
• Familiarity with OWASP Top 10, CVSS, MITRE ATT&CK, and common security frameworks.
• Experience with Windows, Linux, Active Directory, virtualization, and cloud platforms is an advantage.
• Strong analytical, documentation, and communication skills.

Responsibilities

• Conduct vulnerability assessments on networks, servers, endpoints, web applications, databases, and cloud environments.
• Perform authenticated and unauthenticated vulnerability scans using industry-standard security tools.
• Analyze scan results, validate findings, and prioritize vulnerabilities based on risk and business impact.
• Prepare comprehensive vulnerability assessment reports with clear remediation recommendations.
• Collaborate with IT and security teams to ensure timely remediation of identified vulnerabilities.
• Perform periodic security assessments and support compliance requirements.
• Maintain documentation of assessment activities and security findings.
• Stay current with emerging cyber threats, vulnerabilities, and security best practices.

Skills

Vulnerability Assessment

Risk Analysis

Security Reporting

Network Security

Operating Systems Security

Web Application Security

Education

Bachelor's degree in CS/IT/Cybersecurity

Tools

Tenable Nessus

Qualys

Rapid7 InsightVM

Job description

Job Summary

We are seeking a skilled and detail-oriented Vulnerability Assessment Specialist to join our cybersecurity team. The successful candidate will be responsible for identifying, assessing, and reporting security vulnerabilities across networks, systems, applications, and cloud environments while recommending effective remediation measures to strengthen the organization’s security posture.

Key Responsibilities

• Conduct vulnerability assessments on networks, servers, endpoints, web applications, databases, and cloud environments.
• Perform authenticated and unauthenticated vulnerability scans using industry-standard security tools.
• Analyze scan results, validate findings, and prioritize vulnerabilities based on risk and business impact.
• Prepare comprehensive vulnerability assessment reports with clear remediation recommendations.
• Collaborate with IT and security teams to ensure timely remediation of identified vulnerabilities.
• Perform periodic security assessments and support compliance requirements.
• Maintain documentation of assessment activities and security findings.
• Stay current with emerging cyber threats, vulnerabilities, and security best practices.

Qualifications

• Bachelor’s degree in Computer Science, Information Security, Cybersecurity, Information Technology, or a related field.
• Minimum 3 years of experience in vulnerability assessment, penetration testing, or cybersecurity.
• Strong understanding of TCP/IP, networking, operating systems, web technologies, and common security vulnerabilities.
• Hands-on experience with vulnerability assessment tools such as Tenable Nessus, Qualys, Rapid7 InsightVM, or similar.
• Familiarity with OWASP Top 10, CVSS, MITRE ATT&CK, and common security frameworks.
• Experience with Windows, Linux, Active Directory, virtualization, and cloud platforms is an advantage.
• Strong analytical, documentation, and communication skills.

Preferred Certifications

• CompTIA Security+
• CEH (Certified Ethical Hacker)
• eJPT
• GSEC
• OSCP (Preferred)
• Tenable, Qualys, or Rapid7 certifications are an advantage.

Required Skills

• Vulnerability Assessment
• Risk Analysis
• Security Reporting
• Network Security
• Operating Systems Security
• Web Application Security