Qualys Engineer

2 weeks ago

Malvern, PA, United States Diverse Lynx Full-time
Qualys Engineer

Role Name
- Qualys Engineer Targeted Bill Rate
- $79hr REQUIREMENT_CITY -Malvern/Dallas Customer is seeking a senior profile with 5-7 years of experience in Vulnerability Management and Security Operations as Qualys senior engineer ROLE_DESCRIPTION
-
• Bachelor's degree in computer science, Information Security, or related field.
• 5-7 years of experience in Vulnerability Management and Security Operations as Qualys senior engineer
• Hands-on experience with Qualys VMDR (Vulnerability Management, Detection and Response).
• Strong understanding of: o Vulnerability assessment methodologies o CVSS scoring o Security frameworks (NIST, CIS, ISO 27001) o Patch management processes o Network and system security concepts
• Experience with Windows, Linux, and Cloud platforms (AWS, Azure, Eligible to workP).
• Knowledge of TCP/IP, DNS, HTTP/HTTPS, Active Directory, and network protocols.
• Experience with scripting languages such as Python, PowerShell, or Bash.
• Ability to analyze and communicate technical security risks effectively. Roles & Responsibilities
• Administer and maintain the Qualys platform, including VMDR, Policy Compliance, Patch Management, and Asset Inventory modules.
• Configure and manage Qualys scanners, scanner appliances, agents, and scan schedules.
• Perform vulnerability assessments and analyze scan results across servers, endpoints, network devices, cloud environments, and applications.
• Prioritize vulnerabilities based on risk, CVSS scores, threat intelligence, and business impact.
• Coordinate with infrastructure, application, and cloud teams to drive remediation efforts.
• Develop dashboards, reports, and metrics for security leadership and stakeholders.
• Monitor compliance against security policies and regulatory requirements.
• Conduct asset discovery and maintain accurate asset inventories.
• Support security audits, risk assessments, and compliance initiatives.
• Automate vulnerability management processes using APIs, scripting, and integrations.
• Troubleshoot scan-related issues and optimize scanning performance.
• Stay current with emerging vulnerabilities, threat landscapes, and Qualys feature enhancements.