Security engineer (tenable | qualys | siem )

JOB DESCRIPTION
Security Engineer Palo Alto | Crowd Strike | Qualys | Cyber Ark 1. JOB OVERVIEW

Job Title: Vulnerability Management Engineer Department: Information Security Function: CybersecurityReports To: Head of Information Security 2. JOB SUMMARY

The Security Engineer is responsible for identifying, assessing, prioritizing, and remediating security vulnerabilities across the organization's infrastructure. The role operates enterprise-grade vulnerability management platforms (Tenable and Qualys), integrates with SIEM solutions such as Splunk, and works closely with SOC, IT Infrastructure, and risk teams to maintain a strong security posture.

3. TASKS & RESPONSIBILITIES Vulnerability Management Design, deploy, and manage enterprise vulnerability scanning programmes using Tenable (Nessus / / Tenable.sc) and Qualys (VMDR / Cloud Agent). Perform regular authenticated and unauthenticated vulnerability assessments across on-premises, cloud (GCP, AWS, Azure), and hybrid environments. Prioritise vulnerabilities using CVSS scoring, threat intelligence feeds, and business‑criticality context. Track remediation progress, produce trend reports, and present findings to technical and non‑technical stakeholders. SIEM & Security Monitoring Integrate vulnerability scan data into Splunk (or equivalent SIEM) for correlated alerting and dashboarding. Monitor and analyse security logs, events, and alerts to detect indicators of compromise and respond in a timely manner. Build and maintain SIEM use‑case content (correlation rules, dashboards, and reports) aligned to MITRE ATT&CK. Security Operations Design, implement, and maintain secure systems and networks including firewalls, IDS/IPS, NGAV/XDR/NDR, and deception solutions. Implement and manage IAM and PAM solutions in cooperation with application owners and IT teams. Implement and manage Data Loss Prevention (DLP) and Web Proxy solutions. Conduct security audits and compliance assessments (PCI‑DSS, NIA, and other applicable frameworks). Participate in incident response activities including investigation, containment, and recovery. Collaboration & Enablement Collaborate with cross‑functional teams to embed security requirements into system and network design. Provide technical guidance to IT and network engineering teams on effective security control implementation. Conduct knowledge transfer sessions and produce documentation to upskill internal teams. 4. JOB REQUIREMENTS Academic & Professional Qualifications Bachelor's degree in Computer Science, Information Systems, Engineering, or equivalent. Relevant security certifications: CISSP, CISM, CEH, or equivalent. ITIL v3 Foundation (desirable). Experience 3–4 years of hands‑on experience in information security or a similar field. Minimum 2 years of direct, hands‑on experience with Tenable AND/OR Qualys vulnerability management platforms. Experience with SIEM platforms — Splunk strongly preferred; Azure Sentinel or QRadar considered. Technical Skills — Must Have Proficiency in vulnerability management tools: Tenable (Nessus / / Tenable.sc) and/or Qualys (VMDR). Experience with SIEM technologies (Splunk preferred) for log analysis, correlation, and dashboarding. Hands‑on experience with endpoint security tools: NGAV, XDR, NDR, and deception solutions. Technical experience with firewalls, IDS/IPS, IAM/PAM, DLP, and Web Proxy solutions. Strong understanding of networking: TCP/IP, VLANs, VPNs, routing/switching. Familiarity with compliance frameworks: PCI‑DSS, NIA, and industry security best practices. Soft Skills Strong analytical thinking and structured, documentation‑driven mindset. Excellent communication skills — ability to convey complex security concepts to non‑technical audiences. Ability to work independently, manage multiple priorities, and meet deadlines. 5. COMMUNICATIONS & WORKING RELATIONSHIPS

Internal: SOC (Tier 1, 2, 3 Analysts), IT Infrastructure & Network Engineering, Information Governance & Risk, Service Design & Service Operations

External: Clients, Technology Vendors (Tenable, Qualys, Splunk), Security Partners & MSSPs 6. HEALTH, SECURITY, SAFETY AND ENVIRONMENT

Ensure compliance with all relevant health, security, safety and environmental management policies, procedures and controls within own area, monitoring, reviewing, and evaluating on a continuous basis to guarantee employee safety, legislative compliance, delivery of high‑quality service, and a responsible environmental attitude. #J-18808-Ljbffr