Vulnerability Management Specialist - Qualys; m​/f​/d

Vulnerability Management Specialist
- Qualys

We are seeking an experienced Vulnerability Management Specialist
- Qualys to support the organization's cybersecurity and risk management initiatives through the effective management of enterprise vulnerability programs.

This role will be responsible for operating and enhancing the vulnerability management lifecycle, leveraging Qualys to identify, assess, prioritize, report, and remediate security vulnerabilities across infrastructure, cloud, applications, databases, and endpoints. The successful candidate will play a critical role in reducing cyber risk, improving security posture, and ensuring compliance with regulatory and security requirements.

The ideal candidate will possess strong expertise in Qualys Vulnerability Management, Cyber Risk Assessment, Vulnerability Remediation, Security Operations, Infrastructure Security, and Compliance Management
, with experience operating within large enterprise or regulated environments.

• Manage the end-to-end vulnerability management lifecycle across enterprise technology environments.
• Configure, administer, and optimize the Qualys platform and related modules.
• Conduct regular vulnerability scans across servers, workstations, databases, network devices, cloud platforms, and applications.
• Analyse vulnerability findings and perform risk-based prioritisation based on business impact and threat exposure.
• Coordinate remediation activities with infrastructure, cloud, application, and security teams.
• Track remediation progress and enforce vulnerability management SLAs.
• Develop and maintain vulnerability dashboards, scorecards, and executive reporting.
• Support continuous monitoring and security posture improvement initiatives.
• Validate remediation efforts through re-scanning and verification activities.
• Monitor emerging vulnerabilities, threat intelligence feeds, and security advisories to assess organizational impact.
• Support security audits, regulatory reviews, and compliance assessments.
• Perform root cause analysis on recurring vulnerabilities and recommend long-term corrective actions.
• Assist with security risk assessments and technology security reviews.
• Drive continuous improvement of vulnerability management processes, controls, and governance frameworks.
• Contribute to cyber resilience and risk reduction initiatives across the enterprise.

• 5+ years of experience in Cybersecurity, Vulnerability Management, Security Operations, or Infrastructure Security.
• Strong expertise in:
• Vulnerability Management
• Security Risk Management
• Security Assessment
• Cybersecurity Operations
• Infrastructure Security
• Hands-on experience with:
• Qualys VMDR (Vulnerability Management, Detection & Response)
• Qualys Asset Management
• Qualys Patch Management
• Qualys Policy Compliance
• Qualys Cloud Security
• Strong understanding of:
• CVSS Scoring
• Vulnerability Prioritisation
• Security Hardening
• Threat & Risk Assessment
• Secure Configuration Management
• Experience managing vulnerabilities across:
• Windows
• Linux
• Unix
• Databases
• Network Infrastructure
• Cloud Platforms
• Knowledge of cloud environments including:
• Microsoft Azure
• Amazon Web Services (AWS)
• Google Cloud Platform (GCP)
• Experience working with vulnerability remediation governance and tracking frameworks.
• Strong analytical, investigative, and problem-solving skills.
• Excellent communication and stakeholder management abilities.
• Experience creating executive-level security reports and metrics.

• Banking, financial services, or highly regulated industry experience.
• Experience integrating Qualys with SIEM, ITSM, and Security Operations platforms.
• Exposure to vulnerability remediation automation and orchestration solutions.
• Experience with:
• Tenable
• Rapid7
• Service Now
• Splunk
• Understanding of penetration testing and security assessment methodologies.
• Knowledge of cloud-native vulnerability management and container security.
• Experience supporting security compliance programs and audit activities.
• Familiarity with Dev Sec Ops  and secure software development practices.

• Qualys Certified Specialist Certifications
• Qualys VMDR Certification
• CompTIA Security+
• CEH (Certified Ethical Hacker)
• CISSP
• CISM
• GIAC Certifications
• Microsoft Security Certifications
• AWS Security Certifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related discipline.
• Relevant cybersecurity and vulnerability management…