Vulnerability Assessment Engineer

Jobmaze FZ LLC; Al Khobar; Presencial; SAR 180.000 - 240.000; Jornada completa

Descripción de la vacante

Jobmaze FZ LLC in Khobar, Saudi Arabia is seeking an experienced Vulnerability Assessment Engineer to own the end-to-end vulnerability management lifecycle, from assessment and risk prioritization through remediation tracking and reporting. The role emphasizes hands-on analysis and cross-team coordination.

You will work with CrowdStrike Spotlight and conduct supplemental assessments across infrastructure, firewalls, and unmanaged/IoT devices, ensuring timely remediation and compliance with PDPL

Formación

• Strong hands-on experience in vulnerability management and assessment.
• Experience with CrowdStrike Spotlight.
• Strong understanding of CVSS scoring and risk-based prioritization.
• Network and infrastructure vulnerability assessment methodologies.
• Knowledge of vulnerability assessment across firewalls, network devices, servers, and endpoints.
• Penetration testing fundamentals or experience coordinating testing activities.
• Patch management and remediation tracking.
• Experience managing vulnerability remediation SLAs.
• Compliance-focused vulnerability reporting, including PDPL.

Responsabilidades

• Triage and prioritize vulnerability findings from CrowdStrike Spotlight across approximately 3,600 devices and 250 servers.
• Prioritize vulnerabilities using CVSS-based risk scoring and business impact.
• Coordinate remediation timelines for server/OS patching and network device firmware updates.
• Conduct supplemental vulnerability assessments for assets outside CrowdStrike coverage, including network devices, firewalls, and unmanaged/IoT devices.
• Assess infrastructure involving technologies such as Palo Alto, Fortinet, and Cisco Meraki.
• Coordinate periodic internal and external penetration testing and track identified findings through closure.
• Monitor remediation SLAs and ensure vulnerabilities are addressed within agreed timelines.
• Produce recurring vulnerability posture, remediation, and compliance reports.
• Escalate confirmed high-risk vulnerabilities to the Security Analyst for inclusion in security monitoring workflows.

Conocimientos

Vulnerability management

CrowdStrike Spotlight

CVSS risk scoring

Network & infrastructure assessment

Firewall & network device assessment

Penetration testing coordination

Patch management

Remediation SLAs

PDPL compliance reporting

Herramientas

CrowdStrike Spotlight

Descripción del empleo

We are hiring an experienced Vulnerability Assessment Engineer for our client in Khobar, Saudi Arabia to own the end-to-end vulnerability management lifecycle, from assessment and risk prioritization through remediation tracking and reporting.

The role will primarily work with CrowdStrike Spotlight while conducting supplemental vulnerability assessments across infrastructure and devices outside agent coverage.

Key Responsibilities

• Triage and prioritize vulnerability findings from CrowdStrike Spotlight across approximately 3,600 devices and 250 servers
• Prioritize vulnerabilities using CVSS-based risk scoring and business impact
• Coordinate remediation timelines for server/OS patching and network device firmware updates
• Conduct supplemental vulnerability assessments for assets outside CrowdStrike coverage, including network devices, firewalls, and unmanaged/IoT devices
• Assess infrastructure involving technologies such as Palo Alto, Fortinet, and Cisco Meraki
• Coordinate periodic internal and external penetration testing and track identified findings through closure
• Monitor remediation SLAs and ensure vulnerabilities are addressed within agreed timelines
• Produce recurring vulnerability posture, remediation, and compliance reports
• Escalate confirmed high-risk vulnerabilities to the Security Analyst for inclusion in security monitoring workflows

Required Technical Skills

• Strong hands-on experience in vulnerability management and assessment
• Experience with CrowdStrike Spotlight
• Strong understanding of CVSS scoring and risk-based vulnerability prioritization
• Network and infrastructure vulnerability assessment methodologies
• Knowledge of vulnerability assessment across firewalls, network devices, servers, and endpoints
• Penetration testing fundamentals or experience coordinating penetration testing activities
• Patch management and remediation tracking
• Experience managing vulnerability remediation SLAs
• Compliance-focused vulnerability reporting, including support for regulatory requirements such as PDPL

Candidates with strong experience across vulnerability assessment, vulnerability management, risk prioritization, remediation tracking, and enterprise security environments are encouraged to apply.

Only shortlisted candidates will be contacted.