Senior Vulnerability Management Engineer-Qualys

Required Qualifications

• 7+ Years of hands-on experience in Vulnerability Management, security engineering, infrastructure security, or a closely related cybersecurity discipline.
• Demonstrated experience managing vulnerabilities throughout the complete vulnerability lifecycle, including:
  • Identification
  • Triage
  • Risk evaluation
  • Ownership determination
  • Stakeholder outreach
  • Remediation tracking
  • Escalation
  • Validation
  • Closure
• Strong hands-on experience with an enterprise vulnerability management platform such as Qualys VMDR, Tenable, Rapid7, or equivalent technology.
• Strong understanding of vulnerability management concepts including CVE, CVSS, CPE, exploitability, vulnerability severity, compensating controls, remediation, mitigation, false positives, and risk acceptance.
• Ability to read and interpret vulnerability scanner results and independently investigate findings.
• Experience communicating vulnerabilities and remediation requirements to system administrators, application teams, engineers, and technical leadership.
• Experience managing high volumes of vulnerability data within a large or complex technology environment.
• Ability to identify responsible system or application owners and drive findings toward remediation.
• Experience validating vulnerability remediation through rescanning, technical testing, or evidence review.
• Strong understanding of common operating systems, including Windows and Linux.
• Working knowledge of enterprise infrastructure technologies including networking, servers, databases, middleware, virtualization, and cloud environments.
• Understand common vulnerability remediation methods including patching, configuration changes, software upgrades, compensating controls, and service removal.
• Ability to analyze technical security information from multiple sources and determine practical organizational risk.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Ability to independently prioritize and manage multiple vulnerability remediation efforts simultaneously.