Qualys Vulnerability Management Engineer

Request ID: 105346-1
Title: Qualys Vulnerability Management Engineer
Locations: Dallas, TX Need to be local for F2F interview
Duration: 6 Months
Pay Range: $45 - $50/Hour on W2/C2C (All inclusive)

We are seeking a Qualys Vulnerability Management Engineer with 3 5 years of experience in vulnerability management and security operations. The ideal candidate will have hands-on expertise with Qualys VMDR, vulnerability assessment, risk prioritization, remediation coordination, security compliance, and automation.

The candidate will be responsible for administering the Qualys platform, conducting vulnerability assessments across enterprise environments, supporting remediation activities, maintaining asset inventories, and providing security reporting and compliance insights.

Key Responsibilities

• Administer and maintain the Qualys platform, including VMDR, Policy Compliance, Patch Management, and Asset Inventory modules.
• Configure and manage Qualys scanners, scanner appliances, agents, and scan schedules.
• Perform vulnerability assessments across servers, endpoints, network devices, applications, and cloud environments.
• Analyze Qualys scan results and identify vulnerabilities requiring remediation.
• Prioritize vulnerabilities based on CVSS scores, threat intelligence, exploitability, and business impact.
• Coordinate with infrastructure, application, network, and cloud teams to drive vulnerability remediation.
• Develop security dashboards, reports, metrics, and executive-level vulnerability management reports.
• Monitor compliance with security policies and industry frameworks.
• Perform asset discovery and maintain accurate and up-to-date asset inventories.
• Support security audits, risk assessments, compliance initiatives, and regulatory requirements.
• Automate vulnerability management activities using Qualys APIs, Python, PowerShell, Bash, and other scripting technologies.
• Troubleshoot Qualys scanning issues and optimize scanner and agent performance.
• Monitor emerging vulnerabilities, security threats, and Qualys platform enhancements.
• Communicate technical vulnerabilities and security risks effectively to technical and business stakeholders.

Required Skills

• 3 5 years of experience in Vulnerability Management and Security Operations.
• Hands-on experience with Qualys VMDR (Vulnerability Management, Detection and Response).
• Experience with Qualys Policy Compliance, Patch Management, and Asset Inventory.
• Strong understanding of vulnerability assessment and risk management methodologies.
• Good knowledge of CVSS scoring and vulnerability prioritization.
• Understanding of security frameworks such as:
  • NIST
  • CIS
  • ISO 27001
• Strong understanding of patch management processes.
• Knowledge of Windows and Linux operating systems.
• Experience with cloud environments such as AWS, Azure, and GCP.
• Strong understanding of TCP/IP, DNS, HTTP/HTTPS, Active Directory, and network protocols.
• Scripting experience with Python, PowerShell, or Bash.
• Strong analytical and problem-solving skills.
• Ability to communicate security risks and remediation requirements effectively.

Preferred Skills

• Experience integrating Qualys with enterprise security and IT management platforms.
• Experience working with Qualys APIs and automation.
• Knowledge of security operations and vulnerability remediation workflows.
• Experience supporting security audits and compliance assessments.
• Understanding of enterprise network, server, endpoint, and cloud security.
• Knowledge of emerging vulnerability and threat intelligence practices.

Certifications Preferred

• Qualys certification or relevant Qualys training.
• Security+ / CEH / CISSP or equivalent security certification.
• ISO 27001 or other information security certification is a plus.