Senior Qualys Administrator - Vulnerability Management

Key Responsibilities

• Manage and maintain Qualys VMDR, including scanners, scan policies, asset tagging, exclusions, and scan schedules across cloud and on-premises environments.

• Ensure proper vulnerability scanning coverage across AWS, Azure, GCP, servers, endpoints, and network devices.

• Deploy, monitor, and maintain Qualys Cloud Agents across Windows, macOS, and Linux devices.

• Review vulnerability scan results, prioritize risks, and coordinate remediation with engineering and IT teams based on agreed SLAs.

• Create and maintain Qualys TruRisk dashboards and reports for security, risk, compliance, and executive teams.

• Integrate Qualys with tools such as Splunk and ServiceNow to automate vulnerability tracking, reporting, and ticket creation.

• Manage false positives and vulnerability exceptions, ensuring proper documentation and business justification.

• Support OCC and FFIEC audits by providing scan evidence, remediation reports, and security control documentation.

Automation and AI Responsibilities

• Develop Python scripts to automate Qualys administration, including asset tagging, scan scheduling, asset reconciliation, agent cleanup, and reporting.

• Integrate Qualys APIs with AI tools to support vulnerability analysis, risk prioritization, and automated ticket escalation.

• Develop AI agents that analyze scan results, enrich findings with threat intelligence, and automatically route remediation tickets.

• Identify and automate repetitive manual tasks to improve efficiency and reduce operational workload.

• Collaborate with Application Security and Zero Trust teams to align vulnerability management with overall security initiatives.

Qualifications

• At least 4 years of hands-on Qualys administration experience in an enterprise environment with 2,000 or more assets.

• Strong knowledge of Qualys VMDR, vulnerability scanning, scanner management, scan policy configuration, and TruRisk scoring.

• Experience using Qualys APIs and developing automation scripts, preferably with Python.

• Knowledge of vulnerability prioritization frameworks such as CVSS, EPSS, and CISA KEV.

• Experience integrating Qualys with tools such as ServiceNow, Splunk, or Jira.

• Familiarity with cloud asset discovery across AWS, Azure, or GCP.

• Interest in AI-assisted automation, including prompt engineering, API integrations, and AI-driven security workflows.