VINCI Energies Oil & Gas

Vulnerability Security Engineer

VINCI Energies Oil & Gas Abu Dhabi, Abu Dhabi Emirate, United Arab Emirates

Information Technology & Services · 10,001+ employees

Oct 20
security Mid (2-5 yrs) Full-time United Arab Emirates
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

The Vulnerability Security Engineer will perform vulnerability assessments and manage security scanning platforms across IT, cloud, and OT environments. They are responsible for prioritizing risks, coordinating remediation activities with system owners, and maintaining vulnerability dashboards and reports.

What they look for

Vulnerability assessment Security scanning Tenable Nessus Qualys Rapid7 Microsoft Defender Vulnerability Management CVE/CVSS scoring Risk prioritization IT infrastructure Networking Windows/Linux systems ISO 27001 NIST CSF CIS Controls Cloud security Scripting

Requirements

Candidates must have 2–5 years of cybersecurity experience with hands-on exposure to vulnerability management tools. A bachelor's degree in cybersecurity, IT, or a related field is required, along with a solid understanding of IT infrastructure and security frameworks.

Benefits

Personalized onboarding journey Tailored career follow-up Growth opportunities Training and mobility Supportive management Company savings plan Health and safety commitment

Full description

Axians Emirates, an operational entity of Cegelec Abu Dhabi (a subsidiary of VINCI Energies), is a dedicated business unit specializing in the deployment and maintenance of telecom infrastructure, access control, and CCTV systems.

🔐 With strong capabilities in cybersecurity design and implementation, as well as ICT engineering and construction, Axians Emirates delivers end-to-end solutions tailored to the needs of critical sectors.

🛠️ Our services cover the full project lifecycle — from engineering, integration, and installation to commissioning and maintenance — with a focus on security, telecommunications, and information systems for clients in the oil & gas and defense industries.

🌍 With the support of the Axians network (VINCI Energies), Axians Emirates delivers reliable, agile, and locally adapted solutions, while embracing a dynamic approach to innovation and sustainable performance.

We are seeking a Vulnerability Security Engineer to support one of our clients in managing cybersecurity vulnerabilities across IT infrastructure, applications, cloud environments and, where applicable, OT systems. The role involves conducting vulnerability assessments, managing scanning platforms, prioritizing security risks, coordinating remediation activities, and ensuring continuous monitoring and reporting of vulnerabilities.

Responsibilities

  • Perform vulnerability assessments and manage regular security scans across IT infrastructure, applications, cloud and relevant OT environments.
  • Analyze and prioritize identified vulnerabilities based on severity, exploitability, asset criticality and business impact.
  • Administer and maintain vulnerability scanning platforms, including scan configurations, schedules, asset coverage and troubleshooting.
  • Coordinate with IT, security and system owners to track remediation activities, follow up on outstanding findings and ensure timely resolution.
  • Validate remediation actions through rescanning and appropriate verification methods.
  • Monitor emerging vulnerabilities, security advisories and threat intelligence, escalating critical risks when necessary.
  • Maintain vulnerability dashboards, risk registers and remediation reports, providing clear updates to technical teams and management.
  • Support vulnerability risk assessments, security exceptions, audits and continuous improvement of vulnerability management processes.

Requirements

  • 2–5 years of relevant experience in cybersecurity, with hands-on exposure to vulnerability assessment and management.
  • Bachelor's degree in cybersecurity, IT, computer science or a related field.
  • Practical experience with vulnerability scanning tools such as Tenable Nessus, Qualys, Rapid7 or Microsoft Defender Vulnerability Management.
  • Good understanding of vulnerability management processes, CVE/CVSS scoring, risk prioritization and remediation tracking.
  • Solid knowledge of IT infrastructure, networking, Windows/Linux systems and common security vulnerabilities.
  • Familiarity with cybersecurity frameworks and standards such as ISO 27001, NIST CSF or CIS Controls.
  • Exposure to cloud security, scripting/automation or OT/ICS environments would be an advantage.
  • Relevant cybersecurity certifications such as CompTIA Security+, CySA+, CEH or equivalent would be an advantage.

Why join us ?

🧬 Our DNA: Trust, Entrepreneurial Spirit, Solidarity, Autonomy, Responsibility

Joining us means becoming part of a large group while enjoying the agility and warmth of a human-sized company!

🚀 A personalized onboarding journey from day one, with tailored career follow-up

🏫 Opportunities for growth, training, and mobility within a fast-growing international group

🙏🏼 Close and supportive management

💶 Recognition of employee performance through a company savings plan

🥇 Pride in shared achievements

☘️ Respect for the environment and local communities in the countries where we operate (Human Rights Guide)

🦺 Commitment to the health and safety of our employees

👋 At VINCI Energies Oil & Gas, CSR initiatives are deeply embedded in our activities, our ways of working, and ultimately, in our DNA

Similar roles