Vulnerability Management Analyst - Sala al Jadida

Company :

AXA Global Business Services – AXA GBS

At AXA Global Business Services, we believe in the power of partnerships, using our skills in business services and technology to help AXA companies with their main insurance jobs, support functions, and digital processes.

We are focused on creating new and creative ideas that go beyond what is expected and solve special problems. Our enthusiastic team works hard to drive new ideas and push limits, using unmatched technical skills to provide excellent solutions that bring great value to AXA companies.

With a strong focus on being sustainable, being responsible for our community, and including everyone, we are proud to create solutions that not only help businesses succeed but also help build a more sustainable and fair future. 

Company culture :

AXA GBS Morocco operates within a predominantly collaborative culture, where people, trust, and strong professional relationships are key priorities. The company promotes close and supportive management, encouraging accountability, development, and team cohesion. This human-centered approach is reinforced by a strong organizational framework, ensuring reliability, structure, and operational efficiency. It is complemented by a moderate focus on innovation and performance, supporting continuous improvement within a well-defined environment.

Job :

The main job for the Security Engineer in Vulnerability and Threat Management is to do scans and make reports using the Qualys Guard tool.
You will be in charge of doing and scheduling scans to check compliance and find vulnerabilities on AXA's network and systems. You will also create reports for different teams (like server managers, network managers) to help them fix the found vulnerabilities.
The job also involves adding and managing different systems in the Qualys Guard tools.
 

MISSIONS :

Security Management:

• Do vulnerability scans and assessments for different clients, systems, technologies, and devices.
• Work well with people from different Business Units and technology experts.
• Add and manage systems in Qualys.
• Clearly tell people responsible for issues about security weaknesses and risks, and help them fix them.
• Manage and make sure cybersecurity rules are followed and that vulnerabilities are fixed by the deadlines.
• Create and keep updated main reports (dashboards) and/or regular reports to share the department's cybersecurity risks and threats with leaders.

Reporting Service:  

• Provide a monthly/weekly analysis of common vulnerabilities and compliance problems.

• Produce a regular report (dashboard) showing how well problems are being fixed and the status of cases.
 

Required profile :

Education :

• At least a Master's degree (Bac+5) in Networks and Security.

Certification :

• An information security certificate is highly wanted (CCNA R&S, CCNA Security, NSE4, PCCSA, MCSA, CEHv9/v10…or similar).

Overall work experience in the field:

• General understanding of main security tools/systems: (PKI, SIEM, SOC, authentication, IPSEC, AD security, operating system security, Windows account security).
• Experience managing data security programs like Password Vaulting, Privileged Access Management (Cyber Ark).
• Experience with Identity Management ideas and processes, including giving permission, checking who you are, and separation of duties.
• Knowledge of the best ways to keep data secure.
• Experience using an ITSM tool like ServiceNow.
• Strong basic knowledge of networking rules and how to fix network problems.
• Knowledge of hacking methods, cyber threats, and security trends.
• At least 2 years of experience in the cybersecurity field.

Head office address :

Desired personality trait :

Organization