Vulnerability & Risk Analyst

Vulnerability & Risk Analyst

Job Title: Vulnerability and Risk Analyst
Domain: Technical Risk Management
Experience: 6+ Years
Location: Qatar

Job Summary

We are looking for a technically strong Vulnerability and Risk Analyst to identify, analyze, and manage cybersecurity vulnerabilities and technical risks across enterprise environments.

The ideal candidate should combine vulnerability management, risk assessment, data analysis, security tooling, OSINT, and moderate penetration testing capabilities, with a broad understanding of infrastructure, applications, and cloud environments.

Key Responsibilities

• Conduct vulnerability assessments and analyze technical security risks.
• Identify, assess, prioritize, and track vulnerabilities across enterprise environments.
• Apply established risk methodologies to evaluate and prioritize security risks.
• Work with vulnerability management tools to identify and monitor security weaknesses.
• Analyze vulnerability and security data to identify trends, patterns, and risk areas.
• Develop security reports, dashboards, and risk analysis using Excel, Python, and Power BI .
• Conduct OSINT activities to support vulnerability and risk assessments.
• Perform moderate-level penetration testing and technical security assessments.
• Analyze infrastructure, application, and cloud security risks.
• Provide technical recommendations for vulnerability remediation and risk reduction.
• Prepare clear and concise technical risk reports for stakeholders.
• Collaborate with cybersecurity, infrastructure, application, and cloud teams to address identified risks.
• Maintain vulnerability and risk documentation and track remediation progress.

Requirements

• 6+ years of relevant experience in cybersecurity, vulnerability management, technical risk, or a related field.
• Bachelor's degree in:
  • Computer Science
  • Mathematics
  • Software Engineering
  • Physics
  • Data Science
  • Or a related discipline.
• Strong knowledge of risk assessment methodologies .
• Hands-on experience with vulnerability assessment/management tools.
• Strong data analysis skills.
• Proficiency in:
  • Microsoft Excel
  • Python
  • Power BI
• Experience with OSINT .
• Moderate penetration testing experience.
• Broad technical understanding of:
  • IT infrastructure
  • Applications
  • Cloud environments
  • Cybersecurity technologies
• Strong technical writing and reporting skills.

Preferred Certifications

Relevant certifications such as:

• CISSP
• CISM
• ISO 27001 Lead Auditor
• CCNP
• GEVA
• Offensive Security certifications
• Tenable certifications
• Rapid7 certifications