Cybersecurity Engineer (Qualys) - INTL India

Insight Global; Beaverton (OR); On-site; USD 120,000 - 170,000; Full time

Job summary

Insight Global is seeking a Cybersecurity Engineer focusing on Vulnerability Management & Email Security to lead the program and mature security controls across the enterprise. You will administer Qualys VM, manage vulnerability lifecycles, and operate Abnormal Security for email protection to defend against threats.

The role partners with Cyber Engineering, IT Operations, Cloud, SOC, and stakeholders to maintain visibility, timely remediation, and strong email threat defense in a regulated

Qualifications

• 5+ years of experience in cybersecurity engineering, vulnerability management, or security operations.
• Hands-on Qualys VM administration including scan configuration, agent deployment, and reporting.
• Experience with Abnormal Security and email authentication (DMARC, DKIM, SPF).
• Deep understanding of vulnerability management lifecycle, CVSS scoring, and remediation workflows.
• Experience with email threat detection, phishing analysis, and email security incident response.
• Experience with security frameworks (NIST CSF, NIST 800-53, CIS Controls, HIPAA).
• Experience integrating security tools with SIEM, SOAR, ITSM (ServiceNow), and GRC platforms.
• Hands-on cloud environment experience (AWS/Azure/GCP) and cloud-native vulnerability scanning.
• Strong scripting and automation skills (Python, PowerShell) for security tooling.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field.
• Certifications such as CISSP, CEH, CySA+, GEVA, or GCIH preferred.
• Experience with vulnerability risk rating frameworks (SSVC, EPSS, KEV catalog).
• Experience with email authentication protocols (SPF, DKIM, DMARC) and email gateway administration.

Responsibilities

• Administer, optimize, and mature the vulnerability management program.
• Provide hands-on technical leadership for Qualys VM administration and vulnerability lifecycle management.
• Oversee Abnormal Security email protection operations and email threat defense.
• Collaborate with Cyber Engineering, IT Operations, Cloud, Infrastructure, SOC, and business stakeholders.
• Ensure continuous vulnerability visibility, timely remediation, and robust email security across the enterprise.

Skills

Vulnerability management

Email security

Threat detection

Scripting automation

Cross-functional collaboration

Security frameworks

Education

Bachelor’s degree in CS/Cybersecurity/IT

Equivalent combination of education and experience

Tools

Qualys VM

Abnormal Security

Splunk

Microsoft Sentinel

ServiceNow

GRC platforms

Cloud platforms (AWS/Azure/GCP)

Job description

Job Description

The Cybersecurity Engineer (Vulnerability Management & Email Security) is responsible for administering, optimizing, and maturing the organization’s vulnerability management program and email security capabilities. This role provides hands-on technical leadership for Qualys Vulnerability Management administration, vulnerability lifecycle management, and Abnormal Security email protection operations to ensure the enterprise is effectively protected against cyber threats, vulnerabilities, and advanced email-based attacks.

The role acts as a technical subject matter expert, partnering with Cyber Engineering, IT Operations, Cloud, Infrastructure, SOC, and business stakeholders to ensure continuous vulnerability visibility, timely remediation, and robust email threat defense across the enterprise environment.

We are a company committed to creating diverse and inclusive environments where people can bring their full, authentic selves to work every day. We are an equal opportunity/affirmative action employer that believes everyone matters. Qualified candidates will receive consideration for employment regardless of their race, color, ethnicity, religion, sex (including pregnancy), sexual orientation, gender identity and expression, marital status, national origin, ancestry, genetic factors, age, disability, protected veteran status, military or uniformed service member status, or any other status or characteristic protected by applicable laws, regulations, and ordinances. If you need assistance and/or a reasonable accommodation due to a disability during the application or recruiting process, please send a request to [e-mail] learn more about how we collect, keep, and process your private information, please review Insight Global's Workforce Privacy Policy: https://insightglobal.com/workforce-privacy-policy/.

Skills and Requirements

• 5+ years of experience in cybersecurity engineering, vulnerability management, or security operations roles.
• Strong hands-on expertise in Qualys Vulnerability Management (VM) module administration including scan configuration, agent deployment, and reporting.
• Experience with Abnormal email Security as well as DMARC, DKIM, SPF, and TPRM
• Deep understanding of vulnerability management lifecycle, CVSS scoring, exploit prioritization, and remediation workflows.
• Experience with email threat detection, BEC prevention, phishing analysis, and email security incident response.
• Strong working knowledge of security frameworks including NIST CSF, NIST 800-53, CIS Controls, and HIPAA.
• Experience integrating security tools with SIEM (Splunk, Sentinel), SOAR, ITSM (ServiceNow), and GRC platforms.
• Hands-on experience with cloud environments (AWS, Azure, GCP) and cloud-native vulnerability scanning.
• Strong scripting and automation skills (Python, PowerShell, or equivalent) for security tool automation.
• Bachelor’s degree in Computer Science, Cybersecurity, Information Technology, or related field (or equivalent combination of education and experience).
• Experience in healthcare or other highly regulated industries.
• Qualys certifications (Qualys Certified Specialist - Vulnerability Management).
• Professional certifications such as CISSP, CEH, CompTIA CySA+, GEVA, or GCIH.
• Experience with vulnerability risk rating frameworks (SSVC, EPSS, KEV catalog).
• Experience with email authentication protocols (SPF, DKIM, DMARC) and email gateway administration.
• Experience driving vulnerability management maturity and automation initiatives.