Vulnerability Assessment Engineer

About the role

We are hiring an experienced Vulnerability Assessment Engineer for our client in Khobar, Saudi Arabia to own the end‑to‑end vulnerability management lifecycle, from assessment and risk prioritization through remediation tracking and reporting. The role will primarily work with CrowdStrike Spotlight while conducting supplemental vulnerability assessments across infrastructure and devices outside agent coverage.

Key responsibilities

• Triage and prioritize vulnerability findings from CrowdStrike Spotlight across approximately 3,600 devices and 250 servers.
• Prioritize vulnerabilities using CVSS‑based risk scoring and business impact.
• Coordinate remediation timelines for server/OS patching and network device firmware updates.
• Conduct supplemental vulnerability assessments for assets outside CrowdStrike coverage, including network devices, firewalls, and unmanaged/IoT devices.
• Assess infrastructure involving technologies such as Palo Alto, Fortinet, and Cisco Meraki.
• Coordinate periodic internal and external penetration testing and track identified findings through closure.
• Monitor remediation SLAs and ensure vulnerabilities are addressed within agreed timelines.
• Produce recurring vulnerability posture, remediation, and compliance reports.
• Escalate confirmed high‑risk vulnerabilities to the Security Analyst for inclusion in security monitoring workflows.

Required profile

• Strong experience in vulnerability assessment and management across enterprise environments.
• Proficiency with CrowdStrike Spotlight and CVSS‑based risk prioritization.

Required skills

• Strong hands‑on experience in vulnerability management and assessment.
• Experience with CrowdStrike Spotlight.
• Strong understanding of CVSS scoring and risk‑based vulnerability prioritization.
• Network and infrastructure vulnerability assessment methodologies.
• Knowledge of vulnerability assessment across firewalls, network devices, servers, and endpoints.
• Penetration testing fundamentals or experience coordinating penetration testing activities.
• Patch management and remediation tracking.
• Experience managing vulnerability remediation SLAs.
• Compliance‑focused vulnerability reporting, including support for regulatory requirements such as PDPL.