Cybersecurity Specialist

• Own the administration, operation, governance, and continuous improvement of Caterpillar's enterprise Qualys platform
• Manage platform configurations, scan profiles, scanner appliances, schedules, authentication records, asset tags, user access, permissions, subscription usage, and operational health
• Ensure availability, accuracy, and scalability of enterprise-wide vulnerability scanning
• Coordinate rescanning and validation activities
• Maintain integrations between Qualys, Service Now, CMDB, cloud platforms, reporting systems, and approved security technologies
• Oversee host discovery, authenticated infrastructure scanning, scanner appliance operations, and Cloud Agent deployments
• Analyze vulnerability data to identify trends, coverage gaps, systemic issues, and areas requiring attention
• Lead risk-based vulnerability prioritization and remediation decision-making using Qualys capabilities, threat intelligence, exploitability, and asset context
• Evaluate AI-generated insights, predictive analytics, attack paths, and emerging vulnerability trends
• Support audits, controls, and regulatory requirements with Governance and Compliance teams
• Create and maintain operational documentation, standards, and vulnerability lifecycle management processes
• Assess risks associated with AI-generated recommendations and automated remediation
• Partner with Infrastructure, Cloud, Application, and Dev Ops teams on remediation plans and secure configurations
• Advise IT partners on vulnerability risks, remediation techniques, and Qualys best practices
• Provide escalation support and root cause analysis for scan failures, agent issues, and false positives
• Evaluate and implement Qualys modules, features, and scanning techniques
• Drive automation for asset onboarding, reporting, ticketing, and scanning workflows
• Identify process gaps and improve vulnerability management maturity across the organization

• Vulnerability management and security operations expertise
• Hands-on experience with Qualys or similar vulnerability management platforms
• Experience with vulnerability scanning, authenticated scans, Cloud Agents, and asset management
• Knowledge of Windows, Linux, TCP/IP networking, AWS, and Azure
• Experience analyzing vulnerability data, CVSS scores, and threat intelligence
• Strong problem-solving, communication, and stakeholder management skills
• Familiarity with AI, machine learning, and predictive risk modeling
• Experience using Microsoft Copilot, Security Copilot, or similar AI tools for security operations and reporting
• Ability to collaborate across security, infrastructure, and application teams
• Qualys certifications such as Qualys Vulnerability Management, Policy Compliance, Web Application Scanning, VMDR, CSAM, ETM, Cloud Agent, or EASM preferred as top-candidate qualifications
• Experience with ITIL processes, Service Now or Remedy, CI/CD pipelines, and Qualys integrations preferred as top-candidate qualifications
• Experience with Python or Power Shell scripting for automation preferred as a top-candidate qualification
• Experience in large-scale, complex enterprise environments such as Caterpillar preferred as a top-candidate qualification
• Ability to translate technical findings into actionable direction for non-technical teams
• Must work onsite five days a week
• Visa sponsorship is not available

Demonstrates expertise in vulnerability management and security operations, with a strong focus on the administration and continuous improvement of the Qualys platform. Capable of analyzing vulnerability data and collaborating across teams to enhance security posture and compliance.

• Vulnerability Management Expertise
• Qualys Platform Administration
• Cloud Security Knowledge
• Python Scripting for Automation
• Stakeholder Management Skills

• Vulnerability Scanning
• Authenticated Scans
• Asset Management
• Threat Intelligence Analysis
• AI and Machine Learning Familiarity
• Windows and Linux Knowledge
• TCP/IP Networking
• AWS and Azure Experience
• Qualys Integrations
• CI/CD Pipeline Experience

• Problem-Solving Skills
• Communication Skills
• Collaboration Skills

• Qualys Vulnerability Management
• Policy Compliance
• Web Application Scanning
• VMDR
• CSAM
• ETM
• Cloud Agent
• EASM

• Governance and Compliance
• Operational Health
• Risk-Based Vulnerability Prioritization
• Predictive Risk Modeling
• Vulnerability Lifecycle Management

• Qualys
• Service Now
• Microsoft Copilot
• Security Copilot
• Cloud Agent