Vulnerability Management Specialist (Using Qualys & CVSSv3.1)
Job Fit Check
Base Career helps you apply smarter for this job.
Key skills for this role
About the Role
A banking client in Abu Dhabi requires a Vulnerability Management Specialist to lead enterprise-wide vulnerability scanning using Qualys, risk-based prioritization using CVSS v3.1, and executive reporting.
Key Skills for This Role
Responsibilities
- Conduct enterprise wide vulnerability scans using Qualys
- Analyze and prioritize vulnerabilities using CVSS v3.1 scoring, exploitability, asset criticality, and business context
- Maintain remediation SLA tracking dashboards for visibility into patching status and aging vulnerabilities
- Prepare and present quarterly vulnerability posture reports for executive management and risk committees
- Coordinate third party and internal penetration testing exercises
- Enhance vulnerability management processes, reporting workflows, and Qualys platform configurations
Requirements
- 4+ years in enterprise vulnerability assessment, remediation tracking, and penetration test coordination
- Hands on expertise with Qualys VMDR is a must have
- Strong understanding of CVSS v3.1, CWE, OWASP Top 10, and risk based vulnerability management
- Ability to contextualize technical vulnerabilities with business risk and communicate impact
- Experience building dashboards and executive reports for senior leadership and board level consumption
- One of CISSP, Certified Ethical Hacker, OCSP (anyone must)
- Familiarity with ServiceNow VR, Tenable, or Rapid7 is a plus
Full Job Posting
Job Summary
- We are seeking a Vulnerability Management Specialist to lead the identification, assessment, and remediation tracking of security vulnerabilities across the bank’s enterprise environment.
- This role will own the end to end vulnerability lifecycle, from scanning and prioritization to executive reporting, ensuring risk reduction aligns with board level risk appetite.
Key Responsibilities
- Conduct enterprise wide vulnerability scans using Qualys. Perform regular authenticated and unauthenticated scans across infrastructure, applications, and cloud environments.
- Analyze and prioritize vulnerabilities using CVSS v3.1 scoring, exploitability, asset criticality, and business context. Drive focus on high risk exposures impacting critical banking systems.
- Maintain remediation SLA tracking dashboards for visibility into patching status and aging vulnerabilities. Follow up with IT and application owners to ensure timely closure within defined timelines.
- Prepare and present quarterly vulnerability posture reports for executive management and risk committees. Translate technical risk into business impact aligned with the board’s risk appetite.
- Coordinate third party and internal penetration testing exercises. Validate findings, track remediation, and ensure re testing for closure.
- Enhance vulnerability management processes, reporting workflows, and Qualys platform configurations. Contribute to policy updates and KPI definition for continuous improvement.
Required Qualifications & Skills Experience
- 4+ years in enterprise vulnerability assessment, remediation tracking, and penetration test coordination.
- Hands on expertise with Qualys VMDR is a must have.
- Familiarity with ServiceNow VR, Tenable, or Rapid7 is a plus.
- Strong understanding of CVSS v3.1, CWE, OWASP Top 10, and risk based vulnerability management.
- Ability to contextualize technical vulnerabilities with business risk and communicate impact to technical and non technical stakeholders.
- Experience building dashboards and executive reports for senior leadership and board level consumption.
- One of CISSP, Certified Ethical Hacker, OCSP (Anyone must).
Apply for this job in 1 click
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
More jobs at TAT IT Technolgies
Technical Project Manager- wealth or investment platform implementations(Swiss)
Abu Dhabi, UAE
TAT IT Technologies seeks a Technical Project Manager for a banking client in Abu Dhabi, UAE, with experience in wealth or investment platform implementations, particularly Swiss subsidiary setups. The role involves end-
System Analyst (AML Domain)
Abu Dhabi, UAE
TAT IT Technologies seeks a System Analyst with AML domain expertise for a banking client in Abu Dhabi. Responsibilities include gathering requirements, data analysis, ETL validation, and UAT coordination. Requires stron
Business Analyst (Cash Management Platform)
Dubai, UAE
TAT IT Technologies seeks a Business Analyst with Cash Management Platform experience for a banking client in Dubai. The role involves gathering requirements, analyzing processes, and supporting implementation for paymen
Oracle Fusion HCM Consultant
Abu Dhabi, UAE
TAT IT Technologies seeks an Oracle Fusion HCM Consultant for a client in Abu Dhabi. The role requires strong end-to-end implementation experience across Oracle Fusion HCM modules including Global HR, Talent Management,
Senior Backend Engineer – Java SpringBoot Microservices
Abu Dhabi, UAE
TAT IT Technologies is urgently seeking a Senior Backend Engineer with strong Java SpringBoot Microservices and AWS cloud native development experience for a banking client in Abu Dhabi/Dubai. The role involves developin
Senior Backend Engineer – Java SpringBoot Microservices
Dubai, UAE
TAT IT Technologies is urgently seeking a Senior Backend Engineer with strong Java SpringBoot Microservices and AWS cloud native development experience for a banking client in Abu Dhabi/Dubai. The role involves developin
Network and Desktop support
Dubai, UAE
TAT IT Technologies is seeking a Network and Desktop Support specialist for a client in Dubai. The role involves providing end-user IT support for over 1,500 users, troubleshooting hardware and software, and managing Mic
SAP Ariba L3 Consultant
Riyadh, KSA
KOV Medical seeks a Biomedical Engineer with 1-2 years of industry experience to provide clinical and technical support for medical devices in surgical settings. The role involves promoting products, supporting surgeons,
Technical Project Manager- wealth or investment platform implementations(Swiss)
Abu Dhabi, UAE
System Analyst (AML Domain)
Abu Dhabi, UAE
Business Analyst (Cash Management Platform)
Dubai, UAE
Oracle Fusion HCM Consultant
Abu Dhabi, UAE
Senior Backend Engineer – Java SpringBoot Microservices
Abu Dhabi, UAE
Senior Backend Engineer – Java SpringBoot Microservices
Dubai, UAE
Network and Desktop support
Dubai, UAE
SAP Ariba L3 Consultant
Riyadh, KSA