Vulnerability & Risk Analyst

Job Title: Vulnerability and Risk Analyst
Domain: Technical Risk Management
Experience: 6 Years
Location: Qatar

We are looking for a technically strong Vulnerability and Risk Analyst to identify analyze and manage cybersecurity vulnerabilities and technical risks across enterprise environments.

The ideal candidate should combine vulnerability management risk assessment data analysis security tooling OSINT and moderate penetration testing capabilities with a broad understanding of infrastructure applications and cloud environments.

• Conduct vulnerability assessments and analyze technical security risks.
• Identify assess prioritize and track vulnerabilities across enterprise environments.
• Apply established risk methodologies to evaluate and prioritize security risks.
• Work with vulnerability management tools to identify and monitor security weaknesses.
• Analyze vulnerability and security data to identify trends patterns and risk areas.
• Develop security reports dashboards and risk analysis using Excel Python and Power BI.
• Conduct OSINT activities to support vulnerability and risk assessments.
• Perform moderate-level penetration testing and technical security assessments.
• Analyze infrastructure application and cloud security risks.
• Provide technical recommendations for vulnerability remediation and risk reduction.
• Prepare clear and concise technical risk reports for stakeholders.
• Collaborate with cybersecurity infrastructure application and cloud teams to address identified risks.
• Maintain vulnerability and risk documentation and track remediation progress.

• 6 years of relevant experience in cybersecurity vulnerability management technical risk or a related field.
• Bachelor's degree in:
  • Computer Science
  • Mathematics
  • Software Engineering
  • Physics
  • Data Science
  • Or a related discipline.
• Strong knowledge of risk assessment methodologies.
• Hands-on experience with vulnerability assessment/management tools.
• Strong data analysis skills.
• Proficiency in:
  • Microsoft Excel
  • Python
  • Power BI
• Experience with OSINT.
• Moderate penetration testing experience.
• Broad technical understanding of:
  • IT infrastructure
  • Applications
  • Cloud environments
  • Cybersecurity technologies
• Strong technical writing and reporting skills.

Relevant certifications such as:

• CISSP
• CISM
• ISO 27001 Lead Auditor
• CCNP
• GEVA
• Offensive Security certifications
• Tenable certifications
• Rapid7 certifications