تفاصيل الوظيفة
Architect, deploy, and maintain Tenable.sc environment including Nessus scanners, agents, and connectors across IT and OT/ICS segments.
Manage scan policies, schedules, credentials, and scanner zones to maximize coverage
Integrate Tenable with CMDB, ticketing tools and SIEM platforms
Maintain scanner health, plugin updates, license compliance, and capacity planning; own upgrade and patch cycles.
Define and enforce the end-to-end vulnerability management process: discovery, identification, risk scoring, SLA assignment, remediation, verification, and exception handling.
Apply risk-based prioritization using CVSS, EPSS, VPR (Tenable Vulnerability Priority Rating), asset criticality, and threat intelligence feeds.
Drive remediation efforts by collaborating with system owners, publishing clear remediation guidance, and tracking SLA adherence in dashboards.
Develop, maintain, and review vulnerability management policy, standards, and procedures documentation.
Administration of NDR (Endpoint Detection and Response) Darktrace platform
Develop and manage NDR policies
Integration of NDR with SIEM and other Security tools
Fine‑tune NDR detection models, adjust sensitivity, and reduce false positives.
Monitor NDR appliance health, sensor connectivity and ensure continuous visibility across the network.
Apply NDR updates, manage configuration changes, and ensure alignment with security policies.
Manage day‑to‑day operations of the Threat Intelligence Platform (TIP), including data ingestion, enrichment, and workflow configuration
Configure and maintain integrations with threat‑intel feeds
Apply scoring models, enrichment rules, and prioritization logic to ensure high‑value intelligence is surfaced
Build and optimize automated workflows
Maintain integrations of TIP with SIEM, Security controls or other platforms.
5–8 years of hands-on experience in information security with at least 4 years focused on vulnerability management
3+ years of hands-on experience in administering Tenable SC is a must
Solid understanding of common vulnerability classes (OWASP Top 10, CWE Top 25, CVE ecosystem) and patch management workflows
Hands‑on experience in administration of NDR Darktrace is recommended
Hands‑on experience in administration of TIP is recommended
هذا الإعلان منشور على تنقيب السعودية ويُعرض هنا مع الإشارة إلى المصدر. لا نتقاضى أي رسوم من الباحثين عن عمل. إذا كان الإعلان مسيئًا أو احتياليًا، أبلغنا.