Senior Vulnerability Specialist Qualys VMDR And QGS Expert
Zensar Technologies
Get a reply from this employer
Your resume and cover letter, tailored to exactly what they’re hiring for.
Job summary
Zensar Technologies seeks a Senior Vulnerability Management Specialist in Bangalore to lead enterprise VM programs using Qualys VMDR and drive QGS migrations. You will own the vulnerability lifecycle, coordinate with cross-functional teams, and deliver executive risk reporting.
The role demands 8–10 years in VM, 7+ years with VMDR, and proven experience managing 20k+ assets with strong governance and SLA compliance.
Qualifications
- 8-10 years in Vulnerability Management.
- 7+ years hands-on Qualys VMDR administration.
- Experience in QGS migrations and deployment projects.
- Experience managing environments with 20,000+ assets.
- Strong stakeholder management and executive reporting skills.
- Ability to lead vulnerability review meetings and remediation governance.
Responsibilities
- Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
- Own the complete vulnerability lifecycle: discovery, assessment, prioritization, remediation tracking, validation, reporting.
- Develop risk-based remediation strategies aligned with business priorities.
- Review and validate Critical, High, and Zero-Day vulnerabilities.
- Drive vulnerability reduction initiatives and SLA compliance.
- Conduct vulnerability trend analysis and management reviews.
- Qualys VMDR Administration: SME for Qualys VMDR; design and maintain asset groups, dynamic tags, business units, scan profiles, remediation policies.
- Lead QGS migration projects from On-Prem to Cloud environments; coordinate with networks, cloud, and infrastructure teams.
- Develop migration runbooks and post-migration health checks; build executive dashboards and reports.
Skills
Tools
Job description
Job Description:
Job Title
Senior Vulnerability Management Specialist (Qualys VMDR & QGS Expert)
Location: Bangalore
We are seeking a highly skilled Vulnerability Management (VM) Specialist with deep expertise in Qualys VMDR, Qualys Gateway Service (QGS), enterprise vulnerability remediation programs, executive reporting, and QGS migration projects. The candidate will lead vulnerability management operations across large-scale enterprise environments, drive risk-based remediation initiatives, optimize scanning infrastructure, and provide actionable security insights to management.
- 8-10 years in Vulnerability Management.
- 7+ years of hands-on Qualys VMDR administration.
- Proven experience in QGS migrations and deployment projects.
- Experience managing environments with 20,000+ assets.
- Strong stakeholder management and executive reporting skills.
- Ability to lead vulnerability review meetings and remediation governance programs.
Vulnerability Management OPS and implementation.
- Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
- Own the complete vulnerability lifecycle:
- Discovery
- Assessment
- Prioritization
- Remediation Tracking
- Validation
- Reporting
- Develop risk-based remediation strategies aligned with business priorities.
- Review and validate Critical, High, and Zero-Day vulnerabilities.
- Drive vulnerability reduction initiatives and SLA compliance programs.
- Conduct vulnerability trend analysis and management reviews.
- Serve as Subject Matter Expert (SME) for Qualys VMDR.
- Design and maintain:
- Asset Groups
- Dynamic Tags
- Business Units
- Scan Profiles
- Option Profiles
- Remediation Policies
- Manage authenticated scanning for:
- Windows
- Linux
- Network Devices
- Databases
- Optimize scan performance and asset coverage.
- Troubleshoot scanning failures and credential issues.
- Manage VMDR Dashboards and Reporting Frameworks.
Primary Focus Area
- Lead QGS migration projects from On-Prem to Cloud environments.
- Design migration architecture for Qualys Gateway Services.
- Install, configure, upgrade, and maintain QGS infrastructure.
- Perform migration planning, testing, deployment, and rollback activities.
- Conduct connectivity validation and health checks.
- Validate scanner communication between:
- Qualys Cloud Platform
- Internal Assets
- Remote Networks
- Troubleshoot:
- Connectivity issues
- Certificate issues
- Firewall restrictions
- Network routing issues
- Coordinate with:
- Network Teams
- Cloud Teams
- Infrastructure Teams
- Develop QGS migration runbooks and operational documentation.
- Perform post-migration health checks and stabilization activities.
- Develop migration runbooks and operational documentation.
- Expected Experience
- Multiple QGS deployment and migration projects.
- Hybrid cloud environments.
- Azure, AWS, OCI, VMware environments.
- Proxy and firewall integrations.
Must Have Expertise
- Build Executive Vulnerability Dashboards.
- Present cyber risk posture to leadership teams.
- Track and report:
- Total Vulnerabilities
- Critical Vulnerabilities
- High Vulnerabilities
- Remediation Trends
- SLA Compliance
- Asset Coverage
- Scan Coverage
- Vulnerability Aging
- Risk Reduction Metrics
Reporting Tools
- Qualys Reporting
- Power BI
- Excel Dashboards
- ServiceNow Reporting
Sample Reports
- Weekly Executive Security Dashboard
- Monthly Vulnerability Review
- Risk-Based Prioritization Reports
- Regulatory Compliance Reports
- KPI/KRI Reports
- Vulnerability Trending Analysis
Vulnerability Remediation Governance
- Coordinate remediation activities with:
- Windows Teams
- Linux Teams
- Network Teams
- Application Owners
- Conduct remediation review meetings.
- Monitor SLA adherence.
- Define remediation priorities based on:
- CVSS
- EPSS
- Exploit Availability
- Asset Criticality
- Validate fixes through rescanning.
- Utilize Qualys APIs for automation.
- Integrate Qualys with:
- ServiceNow
- Jira
- CMDB
- SIEM Platforms
- Develop scripts using:
- PowerShell
- Python
- Automate reporting and remediation tracking.
Vulnerability Management
- Vulnerability Lifecycle Management
- Risk-Based Vulnerability Management
- CVSS v3/v4
- Vulnerability Prioritization
- Remediation Validation
- Executive Reporting
- Audit Support
- Qualys VMDR
- Qualys Gateway Service (QGS)
- Asset Management
- Policy Compliance
- Patch Management Module
- Report Templates
- Dynamic Tagging
- Cloud Agents
- Scanner Appliances
- VMDR Dashboards
- Windows Server
- Linux (RHEL, CentOS, Ubuntu)
- Active Directory
- DNS
- DHCP
- Azure
- AWS
- Oracle Cloud (OCI)
- VMware
- Hybrid Cloud
- Qualys VMDR
- ServiceNow
- Power BI
- Excel
- Splunk / Sentinel
- Jira
Preferred Certifications
- Qualys VMDR Specialist
- Qualys Certified Professional
- CISSP
- CEH
- Security+
- Microsoft Azure Security Certifications
Good-to-Have
Armis Asset Intelligence & Exposure Management
Required Armis Experience
- Administer and support Armis platform deployments.
- Perform enterprise asset discovery and inventory management.
- Monitor managed, unmanaged, IoT and OT assets.
- Identify vulnerable, rogue, and end-of-life assets.
- Correlate asset intelligence with Qualys vulnerability findings.
- Leverage Armis for attack surface visibility and cyber asset exposure management.
- Track device ownership and remediation accountability.
- Create exposure-based risk reports using Armis insights.
- Monitor:
- IoT Devices
- Network Infrastructure
- Endpoints
- Cloud-connected Assets
Armis Integrations
- Qualys VMDR
- ServiceNow CMDB
- Microsoft Sentinel
- Splunk
- CrowdStrike
- Active Directory
At Zensar, we’re “experience-led everything”. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.
Part of the $4.8 billion RPG Group, we’re a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensarand join us to Grow. Own. Achieve. Learn.to be the best version of yourself.
We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.
Requirements:
'/%3e%3cpath%20d='M101.744%2012.4726L102.894%2016.1947L99.0021%2013.2201L101.744%2012.4726ZM105.3%208.40937H100.488L99.0026%203.59473L97.5116%208.41047L92.7%208.40385L96.5965%2011.3834L95.1055%2016.1942L99.0021%2013.2196L101.408%2011.3834L105.3%208.40992V8.40937Z'%20fill='white'/%3e%3cdefs%3e%3clinearGradient%20id='paint0_linear_5593_1381'%20x1='90'%20y1='9.44471'%20x2='99'%20y2='9.44471'%20gradientUnits='userSpaceOnUse'%3e%3cstop%20stop-color='%2300AD70'/%3e%3cstop%20offset='0.998594'%20stop-color='%2300B67A'/%3e%3cstop%20offset='1'%20stop-color='%23DCDCE6'/%3e%3c/linearGradient%3e%3c/defs%3e%3c/svg%3e){kind=small}
