Vulnerability Management Specialist - Qualys

Role Overview

We are looking for a skilled Vulnerability Management Specialist with expertise in Qualys to enhance and manage the enterprise vulnerability program. This position is pivotal in safeguarding cybersecurity and mitigating risks by identifying and addressing vulnerabilities in infrastructure, cloud, applications, databases, and endpoints. The candidate will focus on lowering cyber risks, bolstering security posture, and meeting compliance standards.

Primary Duties

• Oversee the complete vulnerability management lifecycle within enterprise technology environments.
• Set up, maintain, and fine-tune the Qualys platform along with its auxiliary modules.
• Perform scheduled vulnerability assessments across servers, workstations, databases, networks, cloud services, and applications.
• Evaluate vulnerability reports, prioritizing risks based on business implications and threat landscapes.
• Collaborate with teams across infrastructure, cloud, application, and security domains for remediation efforts.
• Monitor and enforce remediation timelines while updating progress distinctly.
• Create and update detailed vulnerability dashboards, scorecards, and high-level reports.
• Facilitate ongoing monitoring and initiatives aimed at enhancing security posture.
• Confirm remediation effectiveness through rescanning and verification steps.
• Keep track of new vulnerabilities, security advisories, and threat intelligence to evaluate relevant impacts.
• Assist with audits, regulatory checks, and compliance reviews.
• Conduct root cause analysis on persistent vulnerabilities and suggest sustainable corrective measures.
• Support security risk evaluations and technology security assessments.
• Promote continual advancement in vulnerability management policies, controls, and governance.
• Contribute to enterprise-wide cyber resilience and risk reduction programs.

Required Qualifications and Skills

• Minimum 5 years of experience in cybersecurity roles such as vulnerability management, security operations, or infrastructure security.
• Proficient knowledge in vulnerability management principles, security risk and assessment methods, cybersecurity operations, and infrastructure protection.
• Hands-on experience with Qualys modules including VMDR, Asset Management, Patch Management, Policy Compliance, and Cloud Security.
• Good understanding of CVSS scoring, vulnerability prioritization techniques, security hardening, threat and risk assessment, and secure configuration management.
• Experience managing vulnerabilities on operating systems like Windows, Linux, and Unix; databases; network infrastructure; and cloud platforms.
• Familiarity with cloud services such as Microsoft Azure, AWS, and Google Cloud Platform.
• Competency in governance and tracking frameworks for vulnerability remediation.
• Strong analytical and problem-solving abilities coupled with excellent communication and stakeholder engagement skills.
• Ability to generate executive-level security metrics and reports.

Preferred Experience

• Background in banking, financial services, or working in regulated industries.
• Integration experience of Qualys with SIEM, ITSM, and Security Operations platforms.
• Exposure to automation and orchestration solutions for vulnerability remediation.
• Knowledge of other security tools such as Tenable, Rapid7, ServiceNow, and Splunk.
• Understanding penetration testing and security assessment techniques.
• Familiarity with cloud-native vulnerability management and container security approaches.
• Experience supporting compliance programs and audit activities.
• Awareness of DevSecOps principles and secure software development life cycle processes.

Certifications

• Preferred certifications include Qualys Certified Specialist and VMDR certifications, CompTIA Security+, CEH, CISSP, CISM, GIAC, Microsoft Security, and AWS Security credentials.

Educational Background

• Bachelor’s degree in Cybersecurity, Information Security, Computer Science, IT, Engineering, or similar fields.
• Relevant certifications in cybersecurity and vulnerability management are highly recommended, with additional cloud or security operations certifications considered a plus.

About The Employer

Halian is an established organization with nearly three decades of experience in innovative resourcing and smart service solutions aimed at transforming businesses and careers. The company is committed to fostering diversity, equity, and inclusion by ensuring a respectful and empowering environment for all candidates.