Vulnerability Management Analyst | Sala al Jadida (Morocco)

AXA GBS Morocco operates within a predominantly collaborative culture, where people, trust, and strong professional relationships are key priorities. The company promotes close and supportive management, encouraging accountability, development, and team cohesion. This human-centered approach is reinforced by a strong organizational framework, ensuring reliability, structure, and operational efficiency. It is complemented by a moderate focus on innovation and performance, supporting continuous improvement within a well-defined environment.

The main job for the Security Engineer in Vulnerability and Threat Management is to do scans and make reports using the Qualys Guard tool.
You will be in charge of doing and scheduling scans to check compliance and find vulnerabilities on AXA's network and systems. You will also create reports for different teams (like server managers, network managers) to help them fix the found vulnerabilities.
The job also involves adding and managing different systems in the Qualys Guard tools.

MISSIONS :

Security Management:

• Do vulnerability scans and assessments for different clients, systems, technologies, and devices.
• Work well with people from different Business Units and technology experts.
• Add and manage systems in Qualys.
• Clearly tell people responsible for issues about security weaknesses and risks, and help them fix them.
• Manage and make sure cybersecurity rules are followed and that vulnerabilities are fixed by the deadlines.
• Create and keep updated main reports (dashboards) and/or regular reports to share the department's cybersecurity risks and threats with leaders.

Reporting Service:

• Provide a monthly/weekly analysis of common vulnerabilities and compliance problems.

• Produce a regular report (dashboard) showing how well problems are being fixed and the status of cases.

Education :

• At least a Master's degree (Bac+5) in Networks and Security.

Certification :

• An information security certificate is highly wanted (CCNA R&S, CCNA Security, NSE4, PCCSA, MCSA, CEHv9/v10…or similar).

Overall work experience in the field:

• General understanding of main security tools/systems: (PKI, SIEM, SOC, authentication, IPSEC, AD security, operating system security, Windows account security).
• Experience managing data security programs like Password Vaulting, Privileged Access Management (Cyber Ark).
• Experience with Identity Management ideas and processes, including giving permission, checking who you are, and separation of duties.
• Knowledge of the best ways to keep data secure.
• Experience using an ITSM tool like ServiceNow.
• Strong basic knowledge of networking rules and how to fix network problems.
• Knowledge of hacking methods, cyber threats, and security trends.
• At least 2 years of experience in the cybersecurity field.