Vulnerability Management Engineer: Spotlight & Remediation

Jobmaze FZ LLC; Al Khobar; On-site; SAR 180,000 - 240,000; Full time

Job summary

Jobmaze FZ LLC in Khobar, Saudi Arabia is seeking an experienced Vulnerability Assessment Engineer to own the end-to-end vulnerability management lifecycle, from assessment and risk prioritization through remediation tracking and reporting. The role emphasizes hands-on analysis and cross-team coordination.

You will work with CrowdStrike Spotlight and conduct supplemental assessments across infrastructure, firewalls, and unmanaged/IoT devices, ensuring timely remediation and compliance with PDPL

Qualifications

• Strong hands-on experience in vulnerability management and assessment.
• Experience with CrowdStrike Spotlight.
• Strong understanding of CVSS scoring and risk-based prioritization.
• Network and infrastructure vulnerability assessment methodologies.
• Knowledge of vulnerability assessment across firewalls, network devices, servers, and endpoints.
• Penetration testing fundamentals or experience coordinating testing activities.
• Patch management and remediation tracking.
• Experience managing vulnerability remediation SLAs.
• Compliance-focused vulnerability reporting, including PDPL.

Responsibilities

• Triage and prioritize vulnerability findings from CrowdStrike Spotlight across approximately 3,600 devices and 250 servers.
• Prioritize vulnerabilities using CVSS-based risk scoring and business impact.
• Coordinate remediation timelines for server/OS patching and network device firmware updates.
• Conduct supplemental vulnerability assessments for assets outside CrowdStrike coverage, including network devices, firewalls, and unmanaged/IoT devices.
• Assess infrastructure involving technologies such as Palo Alto, Fortinet, and Cisco Meraki.
• Coordinate periodic internal and external penetration testing and track identified findings through closure.
• Monitor remediation SLAs and ensure vulnerabilities are addressed within agreed timelines.
• Produce recurring vulnerability posture, remediation, and compliance reports.
• Escalate confirmed high-risk vulnerabilities to the Security Analyst for inclusion in security monitoring workflows.

Skills

Vulnerability management

CrowdStrike Spotlight

CVSS risk scoring

Network & infrastructure assessment

Firewall & network device assessment

Penetration testing coordination

Patch management

Remediation SLAs

PDPL compliance reporting

Tools

CrowdStrike Spotlight

Job description

Jobmaze FZ LLC in Khobar, Saudi Arabia is seeking an experienced Vulnerability Assessment Engineer to own the end-to-end vulnerability management lifecycle, from assessment and risk prioritization through remediation tracking and reporting. The role emphasizes hands-on analysis and cross-team coordination.

You will work with CrowdStrike Spotlight and conduct supplemental assessments across infrastructure, firewalls, and unmanaged/IoT devices, ensuring timely remediation and compliance with PDPL