Vulnerability Management Analyst

Department: Cybersecurity

Location: Cairo, Egypt

At iSec, we are looking for a Vulnerability Management Analyst is a cybersecurity professional responsible for identifying, prioritizing, and mitigating security weaknesses in an organization's infrastructure, applications, and networks. They bridge the gap between security data and IT remediation by translating scan results into actionable risks.

Key Responsibilities

• Scanning & Detection: Execute automated and manual vulnerability and compliance scans across on-premises, and container environments using tools using Tenable.
• Risk Prioritization: Evaluate discovered weaknesses based on exploitability, potential business impact, and CVSS scores.
• Remediation & Patching: Collaborate with IT and engineering teams to assign, track, and verify the application of patches or system configuration changes.
• Reporting & Metrics: Develop dashboards and compile reports detailing the overall security posture and compliance with internal security policies.
• Engage with IT teams to troubleshoot in issues such as credentials and connection issues.
• Validate the false positive ones.
• Responsible for updating and mitigating any vulnerabilities related to tenable and Nessus.

• Experience: Typically, 2+ years in cybersecurity, vulnerability management (Tenable or Nessus), or IT compliance.
• Technical Skills: Deep understanding of networking protocols, operating systems (Windows, Linux).
• Soft Skills: Strong analytical problem-solving and the ability to explain complex technical risks to non-technical stakeholders.