Senior Qualys Administrator - Vulnerability Management

Rising Tide Digital, Inc.; Taguig; Hybrid; PHP 700.000 - 900.000; Vollzeit

Zusammenfassung

Rising Tide Digital, Inc. in the Philippines seeks an experienced security engineer to manage Qualys VMDR, asset tagging, and scan schedules across cloud and on-prem environments. You will ensure coverage across AWS, Azure, GCP, servers, endpoints, and network devices.

You will develop Python automation, integrate Qualys with ServiceNow and Splunk, and produce TruRisk dashboards for leadership. Collaboration with IT and Application Security teams to align vulnerability management with business

Qualifikationen

• 4+ years of hands-on Qualys administration in an enterprise with 2,000+ assets.
• Strong knowledge of Qualys VMDR, vulnerability scanning, scanner management, scan policy configuration, and TruRisk scoring.
• Experience using Qualys APIs and developing automation scripts, preferably with Python.
• Knowledge of CVSS, EPSS, and CISA KEV for prioritization.
• Experience integrating Qualys with ServiceNow, Splunk, or Jira.
• Familiarity with cloud asset discovery across AWS, Azure, or GCP.
• Interest in AI-assisted automation, including prompt engineering, API integrations, and AI-driven security workflows.

Aufgaben

• Manage and maintain Qualys VMDR, including scanners, scan policies, asset tagging, exclusions, and scan schedules across cloud and on-prem environments.
• Ensure proper vulnerability scanning coverage across AWS, Azure, GCP, servers, endpoints, and network devices.
• Deploy, monitor, and maintain Qualys Cloud Agents across Windows, macOS, and Linux devices.
• Review vulnerability scan results, prioritize risks, and coordinate remediation with engineering and IT teams based on SLAs.
• Create and maintain Qualys TruRisk dashboards and reports for security, risk, compliance, and executives.
• Integrate Qualys with Splunk, ServiceNow to automate vulnerability tracking, reporting, and ticket creation.
• Manage false positives and vulnerability exceptions with documentation and business justification.
• Support OCC and FFIEC audits by providing scan evidence, remediation reports, and security control documentation.

Kenntnisse

Qualys admin

Vulnerability scanning

Scanner management

Scan policy config

TruRisk scoring

Python scripting

AI automation

Cloud asset discovery

CVSS EPSS KEV

ServiceNow integration

Splunk integration

Jira integration

Tools

Qualys VMDR

ServiceNow

Splunk

Jira

Python

Jobbeschreibung

Key Responsibilities

• Manage and maintain Qualys VMDR, including scanners, scan policies, asset tagging, exclusions, and scan schedules across cloud and on-premises environments.

• Ensure proper vulnerability scanning coverage across AWS, Azure, GCP, servers, endpoints, and network devices.

• Deploy, monitor, and maintain Qualys Cloud Agents across Windows, macOS, and Linux devices.

• Review vulnerability scan results, prioritize risks, and coordinate remediation with engineering and IT teams based on agreed SLAs.

• Create and maintain Qualys TruRisk dashboards and reports for security, risk, compliance, and executive teams.

• Integrate Qualys with tools such as Splunk and ServiceNow to automate vulnerability tracking, reporting, and ticket creation.

• Manage false positives and vulnerability exceptions, ensuring proper documentation and business justification.

• Support OCC and FFIEC audits by providing scan evidence, remediation reports, and security control documentation.

Automation and AI Responsibilities

• Develop Python scripts to automate Qualys administration, including asset tagging, scan scheduling, asset reconciliation, agent cleanup, and reporting.

• Integrate Qualys APIs with AI tools to support vulnerability analysis, risk prioritization, and automated ticket escalation.

• Develop AI agents that analyze scan results, enrich findings with threat intelligence, and automatically route remediation tickets.

• Identify and automate repetitive manual tasks to improve efficiency and reduce operational workload.

• Collaborate with Application Security and Zero Trust teams to align vulnerability management with overall security initiatives.

Qualifications

• At least 4 years of hands-on Qualys administration experience in an enterprise environment with 2,000 or more assets.

• Strong knowledge of Qualys VMDR, vulnerability scanning, scanner management, scan policy configuration, and TruRisk scoring.

• Experience using Qualys APIs and developing automation scripts, preferably with Python.

• Knowledge of vulnerability prioritization frameworks such as CVSS, EPSS, and CISA KEV.

• Experience integrating Qualys with tools such as ServiceNow, Splunk, or Jira.

• Familiarity with cloud asset discovery across AWS, Azure, or GCP.

• Interest in AI-assisted automation, including prompt engineering, API integrations, and AI-driven security workflows.