Location: Malvern, Pennsylvania / Dallas, Texas
Work Arrangement: Onsite
Experience: 5–7 Years
Employment Type: Contract
Job Summary
We are seeking an experienced Qualys Security Engineer to manage enterprise vulnerability assessment, security monitoring, and remediation initiatives. The ideal candidate will have strong hands-on experience with Qualys VMDR, vulnerability prioritization, security compliance, and risk-based remediation across on-premises and cloud environments.
The successful candidate will collaborate with infrastructure, application, and cloud security teams to identify vulnerabilities, improve security posture, automate vulnerability management processes, and support compliance initiatives.
Primary Skills
- Qualys VMDR (Vulnerability Management, Detection and Response)
- Vulnerability Assessment and Management,
- Qualys Platform Administration,
- Vulnerability Prioritization and Remediation,
- Security Operations
- CVSS Scoring and Risk Assessment
- Qualys Scanner and Agent Management
- Security Compliance and Policy Management
- Patch Management
- Asset Discovery and Inventory
Secondary Skills
- Qualys Policy Compliance,
- AWS, Microsoft Azure, and Google Cloud Platform,
- Windows and Linux Security,
- Python, PowerShell, and Bash Scripting
- REST APIs and Security Integrations
- NIST, CIS, and ISO 27001 Frameworks
- TCP/IP, DNS, HTTP/HTTPS, and Active Directory
- Security Dashboards and Reporting
- Audit Support and Regulatory Compliance
- Threat Intelligence and Risk Analysis
- Scan Performance Optimization
- Security Automation
Key Responsibilities
Vulnerability Management
- Administer and maintain the Qualys platform, including VMDR, Policy Compliance, Patch Management, and Asset Inventory.
- Configure and manage vulnerability scanners, scanner appliances, agents, and scheduled scans.
- Conduct vulnerability assessments across servers, endpoints, network devices, cloud environments, and applications.
- Analyze scan results and prioritize vulnerabilities based on CVSS scores, threat intelligence, exploitability, and business impact.
- Track remediation progress and coordinate corrective actions with relevant technology teams.
Security Operations and Remediation
- Partner with infrastructure, application, and cloud teams to address identified vulnerabilities.
- Support patch management activities and validate remediation effectiveness.
- Troubleshoot scanning issues and optimize scan coverage and performance.
- Identify recurring vulnerabilities and recommend improvements to security controls.
- Monitor emerging threats and assess their potential impact on enterprise assets.
Compliance and Risk Management
- Monitor adherence to security policies, technical standards, and regulatory requirements.
- Support security audits, risk assessments, and compliance initiatives.
- Apply security frameworks such as NIST, CIS, and ISO 27001 to vulnerability management practices.
- Communicate technical risks, remediation priorities, and security posture to stakeholders.
Automation and Reporting
- Develop dashboards, reports, and performance metrics for security leadership.
- Automate vulnerability management processes using scripting, APIs, and integrations.
- Maintain accurate asset inventories and support asset discovery activities.
- Track vulnerability trends, remediation timelines, and overall risk reduction.
Required Qualifications
- 5–7 years of experience in vulnerability management and security operations.
- Strong hands-on experience with Qualys VMDR.
- Experience administering Qualys scanners, agents, scan schedules, and related modules.
- Strong understanding of vulnerability assessment methodologies and CVSS scoring.
- Knowledge of patch management, network security, and system hardening.
- Experience working with Windows, Linux, and cloud platforms.
- Familiarity with NIST, CIS, and ISO 27001 security frameworks.
- Knowledge of TCP/IP, DNS, HTTP/HTTPS, Active Directory, and network protocols.
- Scripting experience with Python, PowerShell, or Bash.
- Strong analytical, troubleshooting, documentation, and communication skills.
- Bachelor's degree in Computer Science, Information Security, or a related field preferred.
Preferred Qualifications
- Experience with vulnerability management across large enterprise environments.
- Familiarity with cloud security assessments across AWS, Azure, and Google Cloud Platform.
- Experience integrating Qualys with ticketing, reporting, or security operations platforms.
- Knowledge of threat intelligence and risk-based vulnerability prioritization.
All qualified applicants will receive consideration for employment without regard to race, color, religion, sex (including pregnancy, sexual orientation, and gender identity), national origin, age, disability, genetic information, protected veteran status, or any other characteristic protected by applicable federal, state, or local law.
We are committed to providing reasonable accommodations to qualified applicants with disabilities and for sincerely held religious beliefs, as required by applicable law. Applicants who require a reasonable accommodation during the hiring process may request assistance.
Employment may be contingent upon the successful completion of job-related pre-employment screening, which may include background and reference checks and, where permitted by applicable law and applicable to the position, drug testing. All such screening will be conducted in accordance with applicable federal, state, and local laws.
