Job Summary

The role will work closely with infrastructure, cloud, network, application, and security teams to drive remediation of vulnerabilities and improve the organization\'s overall security posture.

Key Responsibilities

Perform vulnerability scanning and assessment using Qualys VM/VMDR. Configure and manage Qualys scanners, scan profiles, asset groups/tags, authentication records, and scan schedules. Analyze vulnerability scan results and validate identified vulnerabilities and potential false positives. Prioritize vulnerabilities based on CVSS severity, exploitability, asset criticality, exposure, and business risk. Use Qualys capabilities such as QIDs, TruRisk, threat intelligence, and vulnerability detection information for risk-based prioritization. Coordinate with Windows, Linux, Network, Database, Cloud, Middleware, and Application teams for vulnerability remediation. Track vulnerabilities through the complete lifecycle from identification → assignment → remediation → validation → closure. Perform remediation validation and execute re-scans to confirm vulnerability closure. Monitor vulnerabilities against agreed remediation SLAs and highlight overdue or high-risk findings. Support remediation of critical and zero-day vulnerabilities through expedited assessment and tracking. Generate periodic vulnerability dashboards and reports covering: Critical/high vulnerabilities Aging vulnerabilities SLA compliance Remediation progress Vulnerability trends Business/unit or technology-level risk Support vulnerability exceptions and risk acceptance processes, including appropriate documentation and expiry tracking. Assist infrastructure teams with understanding vulnerability findings and recommended remediation. Support security audits, compliance assessments, and vulnerability-related evidence requirements. Work with ServiceNow, Jira, or similar ITSM/ticketing platforms for vulnerability tracking and remediation workflow. Continuously improve vulnerability scanning coverage, reporting accuracy, and remediation processes.

Skill Requirements

Strong hands-on experience with Qualys VM/VMDR. Good understanding of: Vulnerability Management lifecycle CVE and CVSS QIDs Qualys TruRisk Windows and Linux vulnerabilities Network and infrastructure vulnerabilities Patch and configuration vulnerabilities Experience with authenticated and unauthenticated vulnerability scanning. Understanding of vulnerability remediation, patch management, and server hardening. Ability to analyze security vulnerabilities and translate technical findings into actionable remediation recommendations. Good knowledge of common security standards/frameworks such as CIS Controls, NIST, and ISO 27001. Experience creating vulnerability dashboards, metrics, and management-level reports. Strong coordination and communication skills for working with technical and business stakeholders.

Other Requirements

Experience with Qualys Policy Compliance, Cloud Agent, Web Application Scanning, or Patch Management. Exposure to Azure, AWS, or other cloud environments. Experience with ServiceNow Vulnerability Response. Knowledge of Power BI, Excel, PowerShell, Python, or APIs for vulnerability reporting and automation. Security certifications such as CompTIA Security+, CEH, Qualys certifications, CISSP, or equivalent.