Vulnerability Management Engineer, Security Assessment – Qualys VMDR

This is a fully remote position, open to applicants in India.

📋 Description

• Administer and troubleshoot vulnerability scans utilizing Qualys VMDR or comparable platforms

• Investigate reasons for scan failures, authentication problems, scanner connectivity, and gaps in asset discovery

• Analyze CVEs, CVSS severity levels, affected assets, and trends in vulnerabilities

• Validate asset coverage and probe into discrepancies found in scan results

• Assist in risk-based prioritization considering severity, exploitability, asset criticality, and remediation SLAs

• Examine recurring findings and possible false positives

• Coordinate technical security evaluations and reviews of infrastructure controls

• Review and authenticate evidence for access management, patching, configuration compliance, logging, and backup controls

• Identify control gaps, missing evidence, policy deviations, and compliance challenges

• Collaborate with infrastructure and application owners to address assessment observations

• Facilitate remediation efforts with Server, Network, Database, Cloud, and Application teams

• Monitor vulnerability aging, action owners, remediation deadlines, SLA breaches, and exceptions

• Validate remediation through rescans and oversee updated vulnerability statuses

• Generate reports on vulnerability, remediation aging, assessment status, and compliance

• Maintain vulnerability registers, assessment trackers, dashboards, and evidence repositories

• Support both internal and external audits by coordinating and validating technical evidence

• Troubleshoot intricate incidents related to vulnerability management platforms and assessment workflows

• Conduct root-cause analysis for recurring scan failures, authentication issues, and reporting discrepancies

• Manage incidents and service requests within established SLAs utilizing approved ITSM workflows

• Adhere to ITIL Incident, Problem, Change, and Request Management processes

• Maintain SOPs, runbooks, knowledge articles, and shift handover documentation; provide guidance to Level 1

• Identify opportunities for automation and process enhancements, coordinating their implementation through approved change procedures

⛳️ Requirements

• 3–6 years of experience in cloud infrastructure operations, administration, and production support across Microsoft Azure and/or AWS environments

• Hands-on experience with Qualys VMDR or equivalent vulnerability management tools

• Strong comprehension of CVEs, CVSS, vulnerability scanning, and validation of remediation

• Experience in conducting security assessments, reviewing technical evidence, and identifying control gaps

• Knowledgeable in Windows/Linux, networking, databases, cloud, and enterprise IT environments

• Familiarity with ServiceNow or similar ITSM tools, reporting, and SLA management

• Strong troubleshooting, analytical, documentation, and stakeholder coordination skills

• Global 24x7x365 support across APAC, EMEA, and NLAM, with rotational shifts and follow-the-sun handovers

• Qualys certification or exposure to Qualys Policy Compliance and related modules is preferred

• Understanding of ISO 27001, SOC 2, CIS Benchmarks, or other security frameworks is preferred

• Exposure to GRC platforms, audit management, and risk exception workflows is preferred

• Basic scripting skills in PowerShell, Python, or Shell are preferred

• Experience with security dashboards, automation, and operational process improvement is preferred

• Security+, ITIL, or relevant information security certifications are preferred

🏝️ Benefits

• Dynamic environment at a well-funded early-stage startup

• Strong customer and partner networks

• Culture of innovation, collaboration, and continuous learning

• Diverse and inclusive workplace

• Equal opportunity employer