Cybersecurity Specialist

Jobtailor; Illinois; On-site; USD 120,000 - 180,000; Full time

Job summary

Caterpillar is seeking a Senior Security Operations professional to administer and optimize its enterprise Qualys platform across the organization. You will configure scans, manage assets, and ensure continuous health and scalability of vulnerability management programs.

The role involves integrating Qualys with ServiceNow and CMDB, coordinating rescans, and driving data-driven remediation with risk-based prioritization. Onsite five days a week in Illinois, no visa sponsorship.

Qualifications

• Vulnerability management and security operations expertise.
• Hands-on experience with Qualys or similar vulnerability management platforms.
• Experience with vulnerability scanning, authenticated scans, Cloud Agents, and asset management.
• Knowledge of Windows, Linux, TCP/IP networking, AWS, and Azure.
• Experience analyzing vulnerability data, CVSS scores, and threat intelligence.
• Strong problem-solving, communication, and stakeholder management skills.
• Familiarity with AI, machine learning, and predictive risk modeling.
• Experience using AI tools for security operations and reporting.
• Ability to translate technical findings into actionable direction for non-technical teams.
• Must work onsite five days a week; Visa sponsorship not available.

Responsibilities

• Own the administration, operation, governance, and continuous improvement of Caterpillar's enterprise Qualys platform
• Manage platform configurations, scan profiles, scanner appliances, schedules, authentication records, asset tags, user access, permissions, subscription usage, and operational health
• Ensure availability, accuracy, and scalability of enterprise-wide vulnerability scanning
• Coordinate rescanning and validation activities
• Maintain integrations between Qualys, ServiceNow, CMDB, cloud platforms, reporting systems, and approved security technologies
• Oversee host discovery, authenticated infrastructure scanning, scanner appliance operations, and Cloud Agent deployments
• Analyze vulnerability data to identify trends, coverage gaps, systemic issues, and areas requiring attention
• Lead risk-based vulnerability prioritization and remediation decision-making using Qualys capabilities, threat intelligence, exploitability, and asset context
• Evaluate AI-generated insights, predictive analytics, attack paths, and emerging vulnerability trends
• Support audits, controls, and regulatory requirements with Governance and Compliance teams
• Create and maintain operational documentation, standards, and vulnerability lifecycle management processes
• Assess risks associated with AI-generated recommendations and automated remediation
• Partner with Infrastructure, Cloud, Application, and DevOps teams on remediation plans and secure configurations
• Advise IT partners on vulnerability risks, remediation techniques, and Qualys best practices
• Provide escalation support and root cause analysis for scan failures, agent issues, and false positives
• Evaluate and implement Qualys modules, features, and scanning techniques
• Drive automation for asset onboarding, reporting, ticketing, and scanning workflows
• Identify process gaps and improve vulnerability management maturity across the organization

Skills

Vulnerability Management

Qualys Platform

ServiceNow

Cloud Platform Knowledge

Python/PowerShell Scripting

Threat Intelligence

Stakeholder Management

AI/ML in Security Ops

Tools

Qualys

ServiceNow

CMDB

Cloud (AWS/Azure)

PowerShell

Python

Job description

• Own the administration, operation, governance, and continuous improvement of Caterpillar's enterprise Qualys platform


• Manage platform configurations, scan profiles, scanner appliances, schedules, authentication records, asset tags, user access, permissions, subscription usage, and operational health


• Ensure availability, accuracy, and scalability of enterprise-wide vulnerability scanning


• Coordinate rescanning and validation activities


• Maintain integrations between Qualys, ServiceNow, CMDB, cloud platforms, reporting systems, and approved security technologies


• Oversee host discovery, authenticated infrastructure scanning, scanner appliance operations, and Cloud Agent deployments


• Analyze vulnerability data to identify trends, coverage gaps, systemic issues, and areas requiring attention


• Lead risk-based vulnerability prioritization and remediation decision-making using Qualys capabilities, threat intelligence, exploitability, and asset context


• Evaluate AI-generated insights, predictive analytics, attack paths, and emerging vulnerability trends


• Support audits, controls, and regulatory requirements with Governance and Compliance teams


• Create and maintain operational documentation, standards, and vulnerability lifecycle management processes


• Assess risks associated with AI-generated recommendations and automated remediation


• Partner with Infrastructure, Cloud, Application, and DevOps teams on remediation plans and secure configurations


• Advise IT partners on vulnerability risks, remediation techniques, and Qualys best practices


• Provide escalation support and root cause analysis for scan failures, agent issues, and false positives


• Evaluate and implement Qualys modules, features, and scanning techniques


• Drive automation for asset onboarding, reporting, ticketing, and scanning workflows


• Identify process gaps and improve vulnerability management maturity across the organization

Requirements

• Vulnerability management and security operations expertise


• Hands-on experience with Qualys or similar vulnerability management platforms


• Experience with vulnerability scanning, authenticated scans, Cloud Agents, and asset management


• Knowledge of Windows, Linux, TCP/IP networking, AWS, and Azure


• Experience analyzing vulnerability data, CVSS scores, and threat intelligence


• Strong problem-solving, communication, and stakeholder management skills


• Familiarity with AI, machine learning, and predictive risk modeling


• Experience using Microsoft Copilot, Security Copilot, or similar AI tools for security operations and reporting


• Ability to collaborate across security, infrastructure, and application teams


• Qualys certifications such as Qualys Vulnerability Management, Policy Compliance, Web Application Scanning, VMDR, CSAM, ETM, Cloud Agent, or EASM preferred as top-candidate qualifications


• Experience with ITIL processes, ServiceNow or Remedy, CI/CD pipelines, and Qualys integrations preferred as top-candidate qualifications


• Experience with Python or PowerShell scripting for automation preferred as a top-candidate qualification


• Experience in large-scale, complex enterprise environments such as Caterpillar preferred as a top-candidate qualification


• Ability to translate technical findings into actionable direction for non-technical teams


• Must work onsite five days a week


• Visa sponsorship is not available

Core Competencies

Demonstrates expertise in vulnerability management and security operations, with a strong focus on the administration and continuous improvement of the Qualys platform. Capable of analyzing vulnerability data and collaborating across teams to enhance security posture and compliance.

Highest-signal resume keywords

• Vulnerability Management Expertise


• Qualys Platform Administration


• Cloud Security Knowledge


• Python Scripting for Automation


• Stakeholder Management Skills

ATS Optimization Keywords

Hard Skills

• Vulnerability Scanning


• Authenticated Scans


• Asset Management


• Threat Intelligence Analysis


• AI and Machine Learning Familiarity


• Windows and Linux Knowledge


• TCP/IP Networking


• AWS and Azure Experience


• Qualys Integrations


• CI/CD Pipeline Experience

Soft Skills

• Problem-Solving Skills


• Communication Skills


• Collaboration Skills

Certifications & Qualifications

• Qualys Vulnerability Management


• Policy Compliance


• Web Application Scanning


• VMDR


• CSAM


• ETM


• Cloud Agent


• EASM

Industry Keywords

• Governance and Compliance


• Operational Health


• Risk-Based Vulnerability Prioritization


• Predictive Risk Modeling


• Vulnerability Lifecycle Management

Tools & Technologies

• Qualys


• ServiceNow


• Microsoft Copilot


• Security Copilot


• Cloud Agent