Vulnerability Management Analyst | Qualys & Nessus Expert

FORFIRM CONSULTING SAGL; Ticino; On-site; CHF 110,000 - 140,000; Full time

Job summary

FORFIRM CONSULTING SAGL is seeking a Cybersecurity Analyst specializing in vulnerability management to own the lifecycle from discovery to remediation in Lugano, Switzerland. You will work with Qualys/Nessus and Azure Virtual Desktop to reduce risk and strengthen security posture.

Applicants should have 3+ years of hands-on experience, strong analysis and reporting skills, and competence in communicating risk to both technical and business audiences. English required, Italian a plus.

Qualifications

• Minimum 3 years hands-on experience in vulnerability management or security operations.
• Strong practical knowledge of Qualys (VMDR, Cloud Agent) and Nessus.
• Solid understanding of networking (TCP/IP, firewalls, segmentation) and Windows/Linux systems.
• Familiarity with CVSS, MITRE ATT&CK, OWASP and CIS Benchmarks.
• Experience communicating risk to technical and business audiences.

Responsibilities

• Plan, configure and run vulnerability scans with Qualys or Nessus across networks, servers, endpoints, applications and cloud environments.
• Assess the security posture of Azure Virtual Desktop environments, including session hosts, golden images, host pools and the underlying Azure resources.
• Analyze scan results, eliminate false positives and prioritize vulnerabilities based on severity, exploitability and business context (CVSS).
• Define and track remediation plans in collaboration with IT and infrastructure teams, including image updates and patching cycles for virtual desktop session hosts.
• Verify compliance of AVD session hosts and images with security baselines and hardening standards (e.g. CIS Benchmarks).
• Produce technical and executive reports with KPIs and risk trends for management and clients.
• Maintain scan templates, policies, asset inventories and operating procedures, ensuring dynamic virtual desktop assets are correctly discovered and covered.
• Support audits and compliance assessments (e.g. ISO 27001, NIS2, GDPR/nFADP).
• Monitor emerging threats, CVEs and vendor advisories, and provide best-practice guidance.

Skills

Vulnerability management

Qualys

Nessus

Azure AVD

Networking

Windows

Linux

CVSS

MITRE ATT&CK

OWASP

CIS Benchmarks

English

Tools

Qualys VMDR

Nessus

Azure Virtual Desktop

Job description

FORFIRM CONSULTING SAGL is seeking a Cybersecurity Analyst specializing in vulnerability management to own the lifecycle from discovery to remediation in Lugano, Switzerland. You will work with Qualys/Nessus and Azure Virtual Desktop to reduce risk and strengthen security posture.

Applicants should have 3+ years of hands-on experience, strong analysis and reporting skills, and competence in communicating risk to both technical and business audiences. English required, Italian a plus.