Vulnerability Management Analyst

About the role

The Vulnerability Management Analyst will join AXA’s newly created information security practice, supporting the company’s digital transformation and cyber‑risk strategy. You will be responsible for planning, executing and reporting vulnerability and compliance scans across AXA’s network and infrastructure using Qualys Guard.

Key responsibilities

• Schedule and run regular vulnerability and compliance scans with Qualys Guard on servers, network devices and cloud assets.
• Analyse scan results, generate detailed reports and communicate findings to system owners, network administrators and other stakeholders.
• Collaborate with business units and technology specialists to prioritize remediation and track remediation progress.
• Integrate new assets into Qualys modules and maintain an up‑to‑date inventory.
• Produce executive dashboards and periodic reports on vulnerability trends, remediation status and compliance metrics.
• Support the enforcement of cybersecurity policies and remediation deadlines.

Required profile

• Minimum Bac+5 (Master’s) degree in Networks, Security or a related field.
• At least 2 years of hands‑on experience in cybersecurity, preferably in vulnerability management.
• Relevant security certifications (e.g., CCNA, NSE4, PCCSA, MCSA, CEH) are highly desired.
• Demonstrated high level of confidentiality, work ethics and willingness to undergo a background check.

Required skills

• Qualys Guard (vulnerability scanning and asset management).
• Network security fundamentals: PKI, IPSEC, Active Directory security, Windows account security.
• Experience with SIEM and SOC concepts.
• Privileged Access Management tools such as CyberArk.
• Identity Management processes (authentication, authorization, segregation of duties).
• ITSM platforms, preferably ServiceNow.
• Strong knowledge of networking protocols and troubleshooting.
• Understanding of hacking techniques, cyber‑threat trends and best practices in data security.