Senior Qualys Engineer Deployment & Administration

VaporVM; Dubai; On-site; AED 420,000 - 640,000; Full time

Job summary

VaporVM Ltd. in Dubai seeks a senior security platform engineer to lead deployment and onboarding of the Qualys platform for multiple clients, designing sensor architecture and rollout plans across on-prem, cloud, and hybrid environments.

The role focuses on configuring VMDR, PC, PM, WAS, CSAM modules, integrating with SIEM/ITSM/CMDB via Qualys API, and delivering dashboards and risk-based remediation. Strong scripting, networking, and cloud experience are required.

Qualifications

• 5+ years in vulnerability management with hands-on Qualys deployment.
• Deep VMDR expertise and two of PC, PM, WAS, CSAM.
• Strong knowledge of Qualys sensor architecture and Cloud Agent deployment.
• Experience integrating Qualys via API with SIEM/ITSM/CMDB platforms.
• Solid networking, OS (Windows/Linux), and cloud (AWS/Azure) fundamentals.

Responsibilities

• Lead deployment and onboarding of the Qualys platform for new clients, including sensor architecture design and rollout planning.
• Deploy and manage Qualys Cloud Agents, scanner appliances, virtual and physical sensors, and Cloud Connectors across on-prem, cloud, and hybrid environments.
• Configure and optimize core Qualys modules (VMDR, PC, PM, WAS, CSAM) for each client and tune scans to minimize business impact.
• Design and maintain asset tagging, dynamic asset groups, and business-unit structures for scalable reporting.
• Integrate Qualys with client ecosystems via API connectors to SIEM, ITSM (ServiceNow, Jira), CMDB, and ticketing systems.
• Develop dashboards, reports, and scorecards mapped to client risk posture and remediation SLAs.
• Assist with vulnerability remediation cycles, false-positive analysis, exceptions, and re-scan verification.
• Ensure deployments align with regulatory frameworks (ISO 27001, PCI DSS, CIS, NCA ECC, SAMA CSF).

Skills

Vulnerability management

Qualys deployment

Cloud Agent deployment at scale

API integration (SIEM/ITSM/CMDB)

Networking fundamentals

Windows & Linux administration

Cloud platforms (AWS, Azure)

Job description

Key Responsibilities

Lead deployment and onboarding of the Qualys platform for new clients including sensor architecture network design and rollout planning Deploy and manage Qualys Cloud Agents scanner appliances virtual and physical passive sensors and Cloud Connectors across on-prem cloud and hybrid environments Configure and optimize core modules VMDR Policy Compliance PC Patch Management PM Web Application Scanning WAS and CyberSecurity Asset Management CSAM Design and tune authenticated and unauthenticated scans credential management scan scheduling and performance to minimize business impact Build and maintain asset tagging dynamic asset groups and business-unit structures for accurate scalable reporting Integrate Qualys with client ecosystems SIEM ITSM ServiceNow Jira CMDB and ticketing via APIs and connectors Develop dashboards reports and scorecards mapped to client risk posture and remediation SLAs Manage platform administration user roles RBAC subscriptions module licensing and multi-tenant separation Support vulnerability remediation cycles validation false-positive analysis exception handling and re-scan verification Align deployments and compliance scanning to regulatory frameworks relevant to clients ISO 27001 NCA ECC SAMA CSF PCI DSS CIS Benchmarks

Required Qualifications

5+ years in vulnerability management, with 3+ years hands-on deploying and administering the Qualys platform.Deep expertise across VMDR and at least two of: PC, PM, WAS, CSAM.Strong working knowledge of Qualys sensor architecture, Cloud Agent deployment at scale, and appliance management.Experience integrating Qualys via the Qualys API (REST/XML) with SIEM, ITSM, or CMDB platforms.Solid grounding in networking (TCP/IP, firewalls, segmentation), operating systems (Windows, Linux), and cloud (AWS, Azure).Understanding of CVSS, CVE, vulnerability prioritization, and risk-based remediation.Familiarity with at least one compliance framework (ISO 27001, PCI DSS, CIS, NCA ECC, or SAMA CSF).Strong documentation, stakeholder communication, and client-facing skills.Preferred / Nice to HaveQualys Certified Specialist certifications (VMDR, PC, or equivalent).Scripting for automation (Python, PowerShell, Bash) against the Qualys API.Experience in an MSSP or multi-tenant service-delivery environment.Exposure to other VM tools (Tenable, Rapid7) for migration or comparison work.