Vulnerability Management Analyst – Security Engineer

About the role

The Vulnerability Management Analyst will join AXA GBS Morocco’s security team to conduct vulnerability scanning, assess risks, and support remediation across the company’s network and infrastructure. Using Qualys Guard, the analyst will generate reports for various technical teams and help enforce cybersecurity policies.

Key responsibilities

• Perform and schedule compliance and vulnerability scans on AXA network assets using Qualys Guard.
• Integrate and manage assets within Qualys modules.
• Coordinate with business units, server administrators, and network specialists to communicate findings and drive remediation.
• Develop and maintain executive dashboards and regular reports on cybersecurity risks and remediation progress.
• Provide weekly and monthly analysis of common vulnerabilities and compliance issues.

Required profile

• Minimum Bac+5 (Master’s level) in Networks and Security or equivalent engineering degree.
• At least 2 years of experience in the cybersecurity industry.
• Relevant security certifications are highly desired (e.g., CCNA, NSE4, PCCSA, MCSA, CEH).
• Broad knowledge of security tools and concepts such as PKI, SIEM, SOC, IPSEC, AD security, and operating‑system security.
• Experience with data‑security programs like password vaulting and privileged access management (e.g., CyberArk).

Required skills

• Qualys Guard vulnerability scanning tool.
• PKI, SIEM, SOC, IPSEC, and Active Directory security.
• Operating‑system security (Windows/Linux).
• Password vaulting and Privileged Access Management (CyberArk).
• Identity Management concepts and processes.
• ServiceNow or similar ITSM platform.
• Strong networking protocol knowledge and troubleshooting.