Position Summary

The onsite engineer is Gruve's day-to-day presence at the customer site and the hands-on owner of the remediation cycle on the client's premises. Working from the client's own environment, the engineer runs Qualys VMDR scans, obtains vulnerability details, prioritises findings with the system owners face to face, and fixes and patches the affected end devices under formal change management with tested rollback. The role also covers physical and locally restricted assets that cannot be reached remotely, performs the daily client upload during business hours, and represents the service in the client's operational and change meetings

Key Responsibilities

• Run Qualys VMDR scans from the client environment and extract vulnerability details, severities, affected assets, and remediation guidance.
• Prioritise findings with the client's infrastructure, application, and security owners in person, aligned to ALKASHIF threat context and asset criticality.
• Fix vulnerabilities and apply patches across in-scope end devices — Windows and Linux servers, Microsoft Exchange, Active Directory, enterprise applications and databases, network devices (routers/switches), security devices (firewalls/NAC/IPS/IDS), cloud workloads, and virtualization (VMware/Hyper-V).
• Remediate assets that require onsite or locally-restricted access — isolated/air-gapped segments, out-of-band and console access, jump hosts, appliances and physical devices not reachable from outside the client network.
• Raise and execute Change Requests for each patching activity — impact, risk classification, schedule, and tested rollback — and attend the client's CAB and operational meetings onsite.
• Execute patching within approved maintenance windows using staggered rollout, with the ability to intervene physically if a change fails.
• Perform post-remediation verification re-scans and keep the vulnerability register and aging report current to verified closure.
• Perform the daily Client upload via the Qualys Splunk Add-on during business hours; monitor upload health and troubleshoot the Add-on so Availability stays compliant.
• Coordinate handover to the offsite engineer (Engineer 2) for after-hours and weekend continuation of open remediation activity.
• Act as the customer-facing point of contact onsite for VM queries, evidence requests, audits, and site walkthroughs.
• Contribute findings, patch-time, coverage, and availability data to the weekly and monthly reporting pack.

Basic Qualifications

• 3–6 years in network/systems engineering with hands-on patching and vulnerability remediation.
• Familiar with Qualys (VMDR) to run scans and obtain vulnerability details and reports; Qualys Splunk Add-on familiarity strongly preferred.
• Strong hands-on patching of Windows Server and Linux (WSUS/SCCM, package managers), including Microsoft Exchange and Active Directory.
• Able to patch/upgrade network devices (routers/switches), security devices (firewalls/NAC/IPS/IDS), virtualization hosts (VMware/Hyper-V), and cloud workloads.
• Comfortable working in a data centre / server-room environment, including console, out-of-band, and physical device access.
• Understanding of CVSS/CVE, the vulnerability management lifecycle, and ITIL change management / CR processes with rollback.
• Familiarity with Splunk/SIEM; scripting (PowerShell / Bash) an advantage.
• Strong customer-facing communication, documentation, coordination, and written-English skills — this role sits with the client every day.
• Must be able to work onsite in Dubai full time and pass the client's security screening / site access requirements.

Preferred Qualifications

• Preferred the certifications in Qualys VMDR; MCSA / RHCSA (Windows / Linux); CompTIA Security+ / Network+; CCNA; Azure Administrator; ITIL Foundation
• Presentable and confident in front of stakeholders;
• Disciplined about daily cadence and SLAs
• Comfortable performing production changes within maintenance windows with rollback discipline in a governed,
• Audit-Ready Environment