Vulnerability Management Expert - Sala al Jadida

Company :

AXA Global Business Services – AXA GBS

At AXA Global Business Services, we believe in the power of partnerships, leveraging our expertise in business services and technology to support AXA entities in their core insurance operations, support functions, and digitization processes.

We are committed to developing fresh and innovative approaches that surpass expectations and address unique challenges. Our passionate team is dedicated to driving innovation and pushing boundaries further, leveraging unparalleled technical expertise to deliver top-notch solutions that add outstanding value to AXA entities.

With a strong focus on sustainability, corporate social responsibility, and DEI, we take pride in crafting solutions that not only drive business success but also contribute to a more sustainable and inclusive future. 

Company culture :

AXA GBS Morocco operates within a predominantly collaborative culture, where people, trust, and strong professional relationships are key priorities. The company promotes close and supportive management, encouraging accountability, development, and team cohesion. This human-centered approach is reinforced by a strong organizational framework, ensuring reliability, structure, and operational efficiency. It is complemented by a moderate focus on innovation and performance, supporting continuous improvement within a well-defined environment.

Job :

The main mission of the Security Engineer Vulnerability and threat Management is to perform scans and reports using the Qualys Guard tool.
You’ll be responsible of performing and scheduling compliance and vulnerability scans on AXA network activity and infrastructure and generating reports to different teams (such as server admins, network administrators in order to mitigate scanned vulnerabilities).
The role consists also of integrating and managing different assets in the Qualys Guard modules.
 

MISSIONS :

Security Management:

• Conduct vulnerability scanning and assessment functions related to various clients, environments, technologies, systems and appliances
• Coordinate effectively with representatives of different Business Units and technology specialists
• Integrate and manage assets in Qualys
• Effectively communicate security vulnerabilities and risks to issue owners and assist in remediation efforts
• Govern and enforce cybersecurity policies and vulnerability remediation deadlines
• Develop and maintain executive dashboards and/or regular reports to communicate department-specific cybersecurity risks and threats

Reporting Service:  

• Provide a monthly/Weekly analysis of common vulnerabilities and compliance issues

• Produce a periodic dashboard demonstrating remediation progress and cases’ status
 

Required profile :

Education :

• Minimum Bac+5 in Networks and Security.

Certification :

• An information Security Certification is highly desired (CCNA R&S, CCNA Security, NSE4, PCCSA, MCSA, CEHv9/v10…or/and equivalent) Work Ethics

• Due to the sensitive nature of the task, the role holder must have a demonstrated high level of work ethics, secrecy and discretion. A background check will be performed.

Overall work experience in the field:

• Global technical vision of the main security tools / environments: (PKI, SIEM, SOC, authentication, IPSEC, AD security, operating system security, Windows account security)
• Experience managing data security programs like Password Vaulting, Privileged Access Management (Cyber Ark)
• Experience with Identity Management concepts and processes including authorization, authentication, segregation of duties
• Knowledge of best practices around data security
• Experience using an ITSM tool such as ServiceNow
• Strong fundamentals in networking protocols and troubleshooting
• Knowledge of hacking techniques, cyber threats and security trends
• At least 5 years’ experience in the cybersecurity industry
 

Head office address :

Desired personality trait :

Organization