Qualys Security Engineer

Location: Malvern, Pennsylvania / Dallas, Texas
Work Arrangement: Onsite
Experience: 5–7 Years
Employment Type: Contract

Job Summary

We are seeking an experienced Qualys Security Engineer to manage enterprise vulnerability assessment, security monitoring, and remediation initiatives. The ideal candidate will have strong hands-on experience with Qualys VMDR, vulnerability prioritization, security compliance, and risk-based remediation across on-premises and cloud environments.

The successful candidate will collaborate with infrastructure, application, and cloud security teams to identify vulnerabilities, improve security posture, automate vulnerability management processes, and support compliance initiatives.

Primary Skills

• Qualys VMDR (Vulnerability Management, Detection and Response)
• Vulnerability Assessment and Management,
• Qualys Platform Administration,
• Vulnerability Prioritization and Remediation,
• Security Operations
• CVSS Scoring and Risk Assessment
• Qualys Scanner and Agent Management
• Security Compliance and Policy Management
• Patch Management
• Asset Discovery and Inventory

Secondary Skills

• Qualys Policy Compliance,
• AWS, Microsoft Azure, and Google Cloud Platform,
• Windows and Linux Security,
• Python, PowerShell, and Bash Scripting
• REST APIs and Security Integrations
• NIST, CIS, and ISO 27001 Frameworks
• TCP/IP, DNS, HTTP/HTTPS, and Active Directory
• Security Dashboards and Reporting
• Audit Support and Regulatory Compliance
• Threat Intelligence and Risk Analysis
• Scan Performance Optimization
• Security Automation

Key Responsibilities

Vulnerability Management

• Administer and maintain the Qualys platform, including VMDR, Policy Compliance, Patch Management, and Asset Inventory.
• Configure and manage vulnerability scanners, scanner appliances, agents, and scheduled scans.
• Conduct vulnerability assessments across servers, endpoints, network devices, cloud environments, and applications.
• Analyze scan results and prioritize vulnerabilities based on CVSS scores, threat intelligence, exploitability, and business impact.
• Track remediation progress and coordinate corrective actions with relevant technology teams.

Security Operations and Remediation

• Partner with infrastructure, application, and cloud teams to address identified vulnerabilities.
• Support patch management activities and validate remediation effectiveness.
• Troubleshoot scanning issues and optimize scan coverage and performance.
• Identify recurring vulnerabilities and recommend improvements to security controls.
• Monitor emerging threats and assess their potential impact on enterprise assets.

Compliance and Risk Management

• Monitor adherence to security policies, technical standards, and regulatory requirements.
• Support security audits, risk assessments, and compliance initiatives.
• Apply security frameworks such as NIST, CIS, and ISO 27001 to vulnerability management practices.
• Communicate technical risks, remediation priorities, and security posture to stakeholders.

Automation and Reporting

• Develop dashboards, reports, and performance metrics for security leadership.
• Automate vulnerability management processes using scripting, APIs, and integrations.
• Maintain accurate asset inventories and support asset discovery activities.
• Track vulnerability trends, remediation timelines, and overall risk reduction.

Required Qualifications

• 5–7 years of experience in vulnerability management and security operations.
• Strong hands-on experience with Qualys VMDR.
• Experience administering Qualys scanners, agents, scan schedules, and related modules.
• Strong understanding of vulnerability assessment methodologies and CVSS scoring.
• Knowledge of patch management, network security, and system hardening.
• Experience working with Windows, Linux, and cloud platforms.
• Familiarity with NIST, CIS, and ISO 27001 security frameworks.
• Knowledge of TCP/IP, DNS, HTTP/HTTPS, Active Directory, and network protocols.
• Scripting experience with Python, PowerShell, or Bash.
• Strong analytical, troubleshooting, documentation, and communication skills.
• Bachelor's degree in Computer Science, Information Security, or a related field preferred.

Preferred Qualifications

• Experience with vulnerability management across large enterprise environments.
• Familiarity with cloud security assessments across AWS, Azure, and Google Cloud Platform.
• Experience integrating Qualys with ticketing, reporting, or security operations platforms.
• Knowledge of threat intelligence and risk-based vulnerability prioritization.