Qualys Engineer

Cloudxtreme; Hyderabad; On-site; INR 1,200,000 - 2,400,000; Full time

Job summary

Cloudxtreme is seeking a Qualys Security Engineer to manage and optimize the Qualys Vulnerability Management platform across on‑prem and cloud environments. You will configure modules, perform regular scans, coordinate remediation, and develop dashboards for executives.

The role requires hands‑on experience with Qualys Cloud Platform, vulnerability management in enterprise settings, and scripting skills (Python, PowerShell, Bash) for automation and API work.

Qualifications

• hands-on experience with Qualys Cloud Platform and vulnerability management in enterprise settings.
• Strong knowledge of CVE/CVSS, exploits, and threat intelligence.
• Experience scripting in Python/PowerShell/Bash and API integrations.

Responsibilities

• Configure, administer, and optimize Qualys VMDR/PC/WAS modules and cloud agents.
• Manage scans, analyses, remediation tracking with IT, DevOps, and SecOps teams.
• Develop dashboards and reports; support compliance programs (ISO27001, SOC2, PCI-DSS, HIPAA).
• Collaborate with SOC and IT during security incidents and threat modeling.
• Integrate Qualys with SIEM/ITSM/CMDB tools and build automation workflows.

Skills

Qualys Cloud Platform

VMDR

PC

WAS

Asset Management

Cloud Security

Python

PowerShell

Bash

API Integrations

Automation

CVSS

CVE Knowledge

TCP/IP & Networks

Windows & Linux

DevOps Collaboration

SIEM (Splunk/QRadar/Sentinel)

Job description

Role & responsibilities

Role Summary

The Qualys Security Engineer is responsible for managing, configuring, and optimizing the Qualys Vulnerability Management platform to strengthen enterprise security posture. This role ensures effective scanning, reporting, remediation coordination, and continuous monitoring across on‑prem and cloud environments.

Key Responsibilities

Platform Management

• Configure, administer, and maintain Qualys modules including:
  
  • Vulnerability Management (VMDR)
    
  • Policy Compliance (PC)
    
  • Asset Management
    
  • Web Application Scanning (WAS)
    
  • Patch Management (optional)
    
• Manage cloud agents, scanners, appliance deployments, and network scan configurations.
  

Vulnerability Operations

• Perform regular vulnerability scans for servers, endpoints, databases, and cloud workloads.
  
• Analyze scan results and validate true positives/negatives.
  
• Assign and track remediation tasks with infrastructure and application teams.
  
• Prioritize vulnerabilities based on risk scoring (CVSS), exploitability, and business context.
  

Security Monitoring & Compliance

• Monitor asset inventory changes and maintain accurate asset tagging.
  
• Support compliance initiatives (ISO 27001, SOC2, PCI‑DSS, HIPAA, etc.).
  
• Develop dashboards, reports, and executive summaries.
  

Incident & Risk Management Support

• Collaborate with SOC and IT teams during security incidents.
  
• Provide vulnerability insights to support threat modeling and risk assessments.
  

Automation & Integration

• Integrate Qualys with SIEM, ITSM, and CMDB tools (e.g., ServiceNow, Splunk).
  
• Develop automation workflows using APIs, scripts, and Qualys Cloud Platform.
  

Required Experience

• 25 years of hands‑on experience with Qualys Cloud Platform.
  
• Experience with vulnerability management in enterprise environments.
  
• Background in Windows, Linux, Network, or Cloud security operations.
  
• Experience working with IT, DevOps, and SecOps teams for remediation.
  

Required Skills

• Strong knowledge of Qualys modules (VMDR, PC, WAS, etc.).
  
• Understanding of CVE, CVSS, exploits, threat intelligence.
  
• Familiarity with TCP/IP, network protocols, OS configurations.
  
• Hands‑on experience with scripting (Python, PowerShell, Bash).
  
• Experience with API integrations and automation.
  
• Strong analytical, communication, and documentation skills.
  

Preferred Skills

• Experience with cloud platforms (AWS, Azure, GCP) and cloud security.
  
• Knowledge of SIEM tools (Splunk, QRadar, Sentinel).
  
• Understanding of patch management processes.
  
• Security certifications: CompTIA Security+, CEH, CySA+, or vendor-specific.
  

Preferred candidate profile