Sr. Qualys Administrator

Private Advertiser; Taguig; Hybrid; PHP 1.800.000 - 3.200.000; Vollzeit

Zusammenfassung

Axos Business Center is shaping an AI-native security organization to move at the speed of the business. We seek a Senior Qualys Administrator & AI Automation Engineer who will own the architecture, operations, and continuous improvement of the Qualys platform across VMDR, Policy Compliance, WAS, Container Security, and Cloud Agent modules.

You will design AI-powered agents that automate routine vulnerability tasks, integrate Qualys data with asset context and threat feeds, and deliver

Qualifikationen

• 5+ years in vulnerability management or security engineering in a production environment.
• Expert-level Qualys VMDR, Policy Compliance, WAS, and Cloud Agent modules.
• Experience with Qualys API, ticketing systems (ServiceNow, Jira) and SIEM (Splunk).
• Strong Python scripting for integrations and automation.
• Solid understanding of enterprise network architecture and cloud/on-prem deployments.
• Experience in regulated financial services (OCC, PCI-DSS, SOX).
• Knowledge of OS security (Windows/Linux) and common vulnerability classes.

Aufgaben

• Own end-to-end Qualys architecture and optimization across VMDR, Policy Compliance, WAS, Container Security, and Cloud Agent modules.
• Design scanner deployment strategy including network segmentation and cloud connector integrations.
• Manage Qualys Cloud Agent deployment across endpoints and servers.
• Build asset tagging taxonomies aligned with ownership and compliance.
• Architect scan scheduling, option profiles, and authentication records.
• Serve as the Qualys SME, troubleshoot issues, manage escalations, and evaluate modules.

Kenntnisse

Vulnerability management

Security engineering

Infrastructure security

Python scripting

Cloud & on-prem networking

PCI-DSS/SOX knowledge

Tools

Qualys VMDR

Qualys Policy Compliance

Qualys WAS

Qualys Cloud Agent

Splunk

ServiceNow

Jira

Jobbeschreibung

Imagine a world where banking is not just a transaction but a transformative experience. Welcome to Axos Business Center! We're on a mission to redefine the financial landscape with innovation, creativity, and customer-centric solutions at the core of everything we do. #Banking Evolved.

Ready to dive into a new chapter in your career journey and make your mark this year? We need visionary minds like yours! Join our team and become part of a dynamic force that's reshaping how people interact with their finances.

Your next big opportunity is just a click away!

Job Description Summary

We are building an AI-native security organization that moves at the speed of the business. Our vulnerability management program, powered by Qualys, is the foundation for understanding and reducing risk across every asset class—servers, endpoints, cloud workloads, web applications, and containers. We are looking for a Senior Qualys Administrator & AI Automation Engineer who will own the architecture, operations, and continuous improvement of our Qualys platform while pioneering AI agents that automate routine vulnerability management tasks at machine speed. This is not a scan-and-report role. You will architect scalable Qualys deployments, build AI-powered agents that eliminate analyst toil, and deliver vulnerability intelligence that drives real remediation outcomes across the enterprise.

Job Description

Responsibilities

• Own the end-to-end architecture, configuration, and optimization of the Qualys platform across VMDR, Policy Compliance, Web Application Scanning (WAS), Container Security, and Cloud Agent modules.

• Design and maintain scanner appliance deployment strategy, including network segmentation considerations, authenticated scanning configurations, and cloud connector integrations (Azure, AWS, GCP).

• Manage Qualys Cloud Agent deployment across all endpoint and server populations, ensuring coverage targets are met and agent health is continuously monitored.

• Build and maintain asset tagging taxonomies that align with business unit ownership, regulatory scope (OCC, PCI-DSS), and remediation accountability structures.

• Architect scan scheduling, option profiles, and authentication records to maximize detection accuracy while minimizing operational impact on production systems.

• Serve as the Qualys subject-matter expert for the security organization, troubleshooting platform issues, managing vendor escalations, and evaluating new Qualys modules and features.

AI Agent Development for Vulnerability Management Automation

• Design, build, and operationalize AI agents that automate routine Qualys workflows: scan result triage, vulnerability prioritization, remediation ticket generation, exception request processing, and compliance report assembly.

• Develop prompt-engineered investigation workflows that correlate Qualys vulnerability data with asset context, threat intelligence feeds, and compensating control data to produce prioritized, analyst-ready remediation plans.

• Build automated reporting agents that generate executive dashboards, regulatory compliance summaries, and business-unit-level vulnerability scorecards without manual intervention.

• Create AI-driven SLA monitoring agents that track remediation timelines, elevate aging vulnerabilities, and generate exception documentation when remediation deadlines are at risk.

• Continuously tune AI agent logic based on false-positive analysis, remediation outcome data, and feedback from infrastructure teams to improve accuracy and reduce noise.

• Evaluate and integrate Qualys API capabilities into AI orchestration pipelines, leveraging the Qualys REST API for programmatic scan management, data extraction, and automated asset inventory reconciliation.

Vulnerability Management Program Operations

• Partner with infrastructure, application, and cloud engineering teams to drive remediation of critical and high-severity vulnerabilities within defined SLA timelines.

• Develop and maintain vulnerability management KPIs, dashboards, and trend analyses that provide leadership with actionable risk visibility.

• Instrument Qualys data feeds into Splunk for correlation with broader security telemetry, enabling enriched detection and investigation workflows.

• Manage the vulnerability exception and risk acceptance process, ensuring documentation meets regulatory and audit requirements.

• Maintain runbooks, architecture diagrams, and operational documentation that enable the broader security team to support vulnerability management operations.

• Track the vulnerability management landscape (CVEs, CISA KEV, vendor advisories) and translate emerging risks into actionable scanning and remediation priorities.

Qualifications

Required

• 5+ years in vulnerability management, security engineering, or infrastructure security with deep, hands-on Qualys platform experience in a production enterprise environment.

• Expert-level knowledge of Qualys VMDR, Policy Compliance, Cloud Agent, and WAS modules, including scanner appliance deployment, option profile tuning, and authentication record management.

• Demonstrated experience with the Qualys API for programmatic scan management, data extraction, and integration with ticketing systems (ServiceNow, Jira) and SIEM platforms (Splunk preferred).

• Strong scripting and automation skills in Python (strongly preferred) for building integrations, data pipelines, and reporting automation.

• Solid understanding of enterprise network architecture, firewall segmentation, and how scanning infrastructure interacts with production environments across on-premises and cloud (Azure, AWS) deployments.

• Experience managing vulnerability remediation programs in regulated financial services environments (OCC, PCI-DSS, SOX) with demonstrated ability to drive remediation accountability.

• Strong working knowledge of operating system security (Windows Server, Linux) and common vulnerability classes across infrastructure, web applications, and cloud configurations.

Preferred

• Experience building or integrating AI/LLM-driven workflows for security operations (alert triage, report generation, automated remediation orchestration).

• Familiarity with prompt engineering, AI orchestration frameworks, and API-driven automation patterns for security use cases.

• Qualys certifications (QSSA, QSCA) or equivalent demonstrated platform expertise.

• Experience with container security scanning and cloud workload protection in Qualys or comparable platforms.

• Familiarity with asset discovery and inventory reconciliation challenges in large, distributed enterprise environments.

Why This Role

• You will build, not just govern. This team ships security tooling and automation, not slide decks.

• AI-first security organization: our autonomous SOC pipeline is live and you will extend AI-driven automation into the vulnerability management domain.

• Direct impact at a federally chartered digital bank where vulnerability management decisions are consequential and visible to leadership.

• Work alongside senior practitioners who value intellectual honesty, hands‑on craft, and enforceable security over compliance theater.