Vulnerability Management Specialist

Role Summary:

We are seeking a highly skilled Vulnerability Management (VM) Specialist with deep expertise in Qualys VMDR, Qualys Gateway Service (QGS), enterprise vulnerability remediation programs, executive reporting, and QGS migration projects. The candidate will lead vulnerability management operations across large-scale enterprise environments, drive risk-based remediation initiatives, optimize scanning infrastructure, and provide actionable security insights to management.

Ideal Candidate Profile:

• 8-10 years in Vulnerability Management.
• 7+ years of hands-on Qualys VMDR administration.
• Proven experience in QGS migrations and deployment projects.
• Experience managing environments with 20,000+ assets.
• Strong stakeholder management and executive reporting skills.
• Ability to lead vulnerability review meetings and remediation governance programs.

Key Responsibilities:

• Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
• Own the complete vulnerability lifecycle: Discovery, Assessment, Prioritization, Remediation Tracking, Validation, Reporting.
• Develop risk-based remediation strategies aligned with business priorities.
• Review and validate Critical, High, and Zero-Day vulnerabilities.
• Drive vulnerability reduction initiatives and SLA compliance programs.
• Conduct vulnerability trend analysis and management reviews.
• Serve as Subject Matter Expert (SME) for Qualys VMDR.
• Design and maintain Asset Groups, Dynamic Tags, Business Units, Scan Profiles, Option Profiles, and Remediation Policies.
• Manage authenticated scanning for Windows, Linux, Network Devices, and Databases.
• Optimize scan performance and asset coverage.
• Troubleshoot scanning failures and credential issues.
• Manage VMDR Dashboards and Reporting Frameworks.

Qualys Gateway Service (QGS) Migration and Management:

• Lead QGS migration projects from On-Prem to Cloud environments.
• Design migration architecture for Qualys Gateway Services.
• Install, configure, upgrade, and maintain QGS infrastructure.
• Perform migration planning, testing, deployment, and rollback activities.
• Conduct connectivity validation and health checks.
• Validate scanner communication between Qualys Cloud Platform, Internal Assets, and Remote Networks.
• Troubleshoot connectivity, certificate, firewall, and network routing issues.
• Coordinate with Network, Cloud, and Infrastructure Teams.
• Develop QGS migration runbooks and operational documentation.
• Perform post-migration health checks and stabilization activities.

Expected Experience:

• Multiple QGS deployment and migration projects.
• Hybrid cloud environments.
• Azure, AWS, OCI, VMware environments.
• Proxy and firewall integrations.

Executive Reporting and Metrics:

• Build Executive Vulnerability Dashboards.
• Present cyber risk posture to leadership teams.
• Track and report Total Vulnerabilities, Critical and High Vulnerabilities, Remediation Trends, SLA Compliance, Asset Coverage, Scan Coverage, Vulnerability Aging, and Risk Reduction Metrics.
• Produce Weekly Executive Security Dashboards, Monthly Vulnerability Reviews, Risk-Based Prioritization Reports, Regulatory Compliance Reports, KPI/KRI Reports, and Vulnerability Trending Analysis.

Vulnerability Remediation Governance:

• Coordinate remediation activities with Windows, Linux, Network Teams, and Application Owners.
• Conduct remediation review meetings and monitor SLA adherence.
• Define remediation priorities based on CVSS, EPSS, Exploit Availability, and Asset Criticality.
• Validate fixes through rescanning.

Automation and Integration:

• Utilize Qualys APIs for automation.
• Integrate Qualys with ServiceNow, Jira, CMDB, and SIEM Platforms.
• Develop scripts using PowerShell and Python.
• Automate reporting and remediation tracking.

Required Skills:

• Vulnerability Lifecycle Management, Risk-Based Vulnerability Management, CVSS v3/v4, Vulnerability Prioritization, Remediation Validation, Executive Reporting, Audit Support.
• Qualys VMDR, Qualys Gateway Service (QGS), Asset Management, Policy Compliance, Patch Management Module, Report Templates, Dynamic Tagging, Cloud Agents, Scanner Appliances, VMDR Dashboards.
• Windows Server, Linux (RHEL, CentOS, Ubuntu), Active Directory, DNS, DHCP.
• Azure, AWS, Oracle Cloud (OCI), VMware, Hybrid Cloud.
• Tools: Qualys VMDR, ServiceNow, Power BI, Excel, Splunk / Sentinel, Jira.

Preferred Certifications:

• Qualys VMDR Specialist
• Qualys Certified Professional
• CISSP
• CEH
• Security+
• Microsoft Azure Security Certifications

Good-to-Have (Armis Asset Intelligence and Exposure Management):

• Administer and support Armis platform deployments.
• Perform enterprise asset discovery and inventory management.
• Monitor managed, unmanaged, IoT and OT assets.
• Identify vulnerable, rogue, and end-of-life assets.
• Correlate asset intelligence with Qualys vulnerability findings.
• Leverage Armis for attack surface visibility and cyber asset exposure management.
• Track device ownership and remediation accountability.
• Create exposure-based risk reports using Armis insights.
• Monitor IoT Devices, Network Infrastructure, Endpoints, and Cloud-connected Assets.

Armis Integrations:

• Qualys VMDR, ServiceNow CMDB, Microsoft Sentinel, Splunk, CrowdStrike, Active Directory.

About Us:

At Zensar, we are experience-led everything. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace.