Qualys Engineer

Bachelor's degree in computer science, Information Security, or related field. 3-5 years of experience in Vulnerability Management and Security Operations. Hands-on experience with Qualys VMDR (Vulnerability Management, Detection and Response). Strong understanding of:

• Vulnerability assessment methodologies
• CVSS scoring
• Security frameworks (NIST, CIS, ISO 27001)
• Patch management processes
• Network and system security concepts

Experience with Windows, Linux, and Cloud platforms (AWS, Azure, Google Cloud Platform). Knowledge of TCP/IP, DNS, HTTP/HTTPS, Active Directory, and network protocols. Experience with scripting languages such as Python, Power Shell, or Bash. Ability to analyze and communicate technical security risks effectively.

• Administer and maintain the Qualys platform, including VMDR, Policy Compliance, Patch Management, and Asset Inventory modules.
• Configure and manage Qualys scanners, scanner appliances, agents, and scan schedules.
• Perform vulnerability assessments and analyze scan results across servers, endpoints, network devices, cloud environments, and applications.
• Prioritize vulnerabilities based on risk, CVSS scores, threat intelligence, and business impact.
• Coordinate with infrastructure, application, and cloud teams to drive remediation efforts.
• Develop dashboards, reports, and metrics for security leadership and stakeholders.
• Monitor compliance against security policies and regulatory requirements.
• Conduct asset discovery and maintain accurate asset inventories.
• Support security audits, risk assessments, and compliance initiatives.
• Automate vulnerability management processes using APIs, scripting, and integrations.
• Troubleshoot scan-related issues and optimize scanning performance.
• Stay current with emerging vulnerabilities, threat landscapes, and Qualys feature enhancements.