Vulnerability and Risk Analyst

Role overview

Techpace is looking for a cybersecurity professional who can proactively assess risk, uncover vulnerabilities, and recommend practical mitigation steps for digital assets and IT infrastructure. This position works across teams to strengthen risk management practices, maintain alignment with cybersecurity standards, and reduce exposure to new and evolving threats.

Core analytical focus

The role requires strong contextual risk analysis skills, including the ability to judge how several risk factors may affect organizational operations. You should be comfortable collecting, combining, and interpreting information from multiple sources to support informed decisions.

Key responsibilities and technical expectations

• Apply structured risk assessment methods to measure both the likelihood and impact of identified risks, using established frameworks such as NIST and ISO.
• Work with vulnerability management platforms and data analysis tools to handle large datasets, spot patterns and correlations, and automate parts of the assessment and reporting workflow using tools such as Excel, Python, and Power BI.
• Use open-source intelligence techniques to search for, collect, and analyze exposed sensitive information, including using dorking methods to find files or data revealed through misconfiguration or security weaknesses.
• Bring moderate hands-on penetration testing experience to verify findings and validate security issues.
• Operate confidently across major technology areas such as network, compute, and storage infrastructure, virtualization, web and mobile applications, architecture, and system/application integration.
• Support security operations in a live IT environment, including applying security controls, making configuration changes, and contributing to day-to-day protection efforts.
• Produce clear, professional technical documentation and risk write-ups.

Qualifications

• A bachelor's degree in Computer Science, Mathematics, Software Engineering, Physics, Data Science, or a related discipline.
• At least 6 years of experience in cybersecurity risk management and compliance.
• Relevant professional certifications such as CISSP, CISM, ISO 27001 Lead Auditor, CCNP, GIAC Enterprise Vulnerability Assessor (GEVA), offensive security certifications related to web or network testing, and/or vendor certifications from Tenable or Rapid7 are preferred.

Additional information

This opportunity is based in Doha, Qatar and is a full-time onsite position. The compensation details, opening count, start date, duration, and application deadline were not specified in the source.