Vulnerability Security Engineer

About the role

Axians Emirates, an operational entity of Cegelec Abu Dhabi (a subsidiary of VINCI Energies), is looking for a Vulnerability Security Engineer to support one of its clients in managing cybersecurity vulnerabilities across IT infrastructure, applications, cloud environments and, where applicable, OT systems. The role covers assessments, scanning platforms, risk prioritization, remediation coordination and ongoing monitoring and reporting.

Key responsibilities

• Perform vulnerability assessments and run regular security scans across IT infrastructure, applications, cloud and relevant OT environments
• Analyze and prioritize vulnerabilities by severity, exploitability, asset criticality and business impact
• Administer and maintain vulnerability scanning platforms, including scan configuration, schedules, asset coverage and troubleshooting
• Coordinate with IT, security and system owners to track remediation, follow up on outstanding findings and ensure timely resolution
• Validate remediation through rescanning and verification methods
• Monitor emerging vulnerabilities, security advisories and threat intelligence, escalating critical risks when needed
• Maintain vulnerability dashboards, risk registers and remediation reports, updating technical teams and management
• Support vulnerability risk assessments, security exceptions, audits and continuous improvement of vulnerability management processes

Required profile

• 2-5 years of relevant experience in cybersecurity, with hands-on exposure to vulnerability assessment and management
• Bachelor's degree in cybersecurity, IT, computer science or a related field
• Good understanding of vulnerability management processes, CVE/CVSS scoring, risk prioritization and remediation tracking
• Solid knowledge of IT infrastructure, networking, Windows/Linux systems and common security vulnerabilities
• Familiarity with frameworks such as ISO 27001, NIST CSF or CIS Controls; cloud security, scripting/automation or OT/ICS exposure is an advantage
• Certifications such as CompTIA Security+, CySA+, CEH or equivalent are an advantage

Required skills

• Vulnerability scanning tools such as Tenable Nessus, Qualys, Rapid7 or Microsoft Defender Vulnerability Management
• Knowledge of CVE/CVSS scoring and risk prioritization
• Windows/Linux systems and networking

What we offer

• Personalized onboarding and career follow-up
• Growth, training and mobility opportunities within an international group
• Close and supportive management
• Performance recognition through a company savings plan