Qualys VMDR Lead — AI-Driven Vulnerability Management

Rising Tide Digital, Inc.; Taguig; Hybrid; PHP 700,000 - 900,000; Full time

Job summary

Rising Tide Digital, Inc. in the Philippines seeks an experienced security engineer to manage Qualys VMDR, asset tagging, and scan schedules across cloud and on-prem environments. You will ensure coverage across AWS, Azure, GCP, servers, endpoints, and network devices.

You will develop Python automation, integrate Qualys with ServiceNow and Splunk, and produce TruRisk dashboards for leadership. Collaboration with IT and Application Security teams to align vulnerability management with business

Qualifications

• 4+ years of hands-on Qualys administration in an enterprise with 2,000+ assets.
• Strong knowledge of Qualys VMDR, vulnerability scanning, scanner management, scan policy configuration, and TruRisk scoring.
• Experience using Qualys APIs and developing automation scripts, preferably with Python.
• Knowledge of CVSS, EPSS, and CISA KEV for prioritization.
• Experience integrating Qualys with ServiceNow, Splunk, or Jira.
• Familiarity with cloud asset discovery across AWS, Azure, or GCP.
• Interest in AI-assisted automation, including prompt engineering, API integrations, and AI-driven security workflows.

Responsibilities

• Manage and maintain Qualys VMDR, including scanners, scan policies, asset tagging, exclusions, and scan schedules across cloud and on-prem environments.
• Ensure proper vulnerability scanning coverage across AWS, Azure, GCP, servers, endpoints, and network devices.
• Deploy, monitor, and maintain Qualys Cloud Agents across Windows, macOS, and Linux devices.
• Review vulnerability scan results, prioritize risks, and coordinate remediation with engineering and IT teams based on SLAs.
• Create and maintain Qualys TruRisk dashboards and reports for security, risk, compliance, and executives.
• Integrate Qualys with Splunk, ServiceNow to automate vulnerability tracking, reporting, and ticket creation.
• Manage false positives and vulnerability exceptions with documentation and business justification.
• Support OCC and FFIEC audits by providing scan evidence, remediation reports, and security control documentation.

Skills

Qualys admin

Vulnerability scanning

Scanner management

Scan policy config

TruRisk scoring

Python scripting

AI automation

Cloud asset discovery

CVSS EPSS KEV

ServiceNow integration

Splunk integration

Jira integration

Tools

Qualys VMDR

ServiceNow

Splunk

Jira

Python

Job description

Rising Tide Digital, Inc. in the Philippines seeks an experienced security engineer to manage Qualys VMDR, asset tagging, and scan schedules across cloud and on-prem environments. You will ensure coverage across AWS, Azure, GCP, servers, endpoints, and network devices.

You will develop Python automation, integrate Qualys with ServiceNow and Splunk, and produce TruRisk dashboards for leadership. Collaboration with IT and Application Security teams to align vulnerability management with business