Vulnerability Assessment Engineer

About Secure Tech Secure Tech is a system integration company in Riyadh, Saudi Arabia, specializing in security systems and technical solutions. Our commitment is to provide the best service and equipment in the technological and security fields, adhering to international standards. Our team of qualified professionals strives for development and improvement for a better future in Saudi Arabia. Job Summary Owns the vulnerability management lifecycle end to end triage, prioritization, and remediation tracking building on the scanning capability already delivered through the CrowdStrike agent, and closing coverage gaps it doesn't reach. Responsibilities • – Triage and prioritize vulnerability findings from CrowdStrike Spotlight across the ~3,600-device, 250-servers. • – Coordinate remediation timelines with the System Administrator (server/OS patching) and NOC (network device firmware). • – Run supplemental vulnerability assessments for assets outside CrowdStrike agent coverage network devices, firewalls (Palo Alto, Fortinet, Meraki), and unmanaged/IoT devices. • – Coordinate periodic penetration testing (internal and external) and track findings through to closure. • – Track remediation SLAs and produce recurring vulnerability posture and compliance reporting. • – Feed confirmed high-risk findings into the Security Analyst's SIEM/monitoring workflow. Must Have • – Vulnerability management using CrowdStrike Spotlight as the primary source. • – CVSS-based risk scoring and remediation prioritization. • – Network and infrastructure vulnerability assessment methodology. • – Penetration testing fundamentals (or vendor/pentest coordination experience). • – Patch management coordination and remediation SLA tracking. • – Compliance-oriented reporting (e.g., in support of PDPL obligations). Show more Show less

Must Have: Vulnerability management using CrowdStrike Spotlight as the primary source; CVSS-based risk scoring and remediation prioritization; Network and infrastructure vulnerability assessment methodology; Penetration testing fundamentals (or vendor/pentest coordination experience); Patch management coordination and remediation SLA tracking; Compliance-oriented reporting (e.g., in support of PDPL obligations).

Triage and prioritize vulnerability findings from CrowdStrike Spotlight across the ~3,600-device, 250-servers; Coordinate remediation timelines with the System Administrator (server/OS patching) and NOC (network device firmware); Run supplemental vulnerability assessments for assets outside CrowdStrike agent coverage (network devices, firewalls, and unmanaged/IoT devices); Coordinate periodic penetration testing (internal and external) and track findings through to closure; Track remediation SLAs and produce recurring vulnerability posture and compliance reporting; Feed confirmed high-risk findings into the Security Analyst's SIEM/monitoring workflow.