IT Security Technical Lead

QUEST DIAGNOSTICS INC; Tampa (FL); On-site; USD 120,000 - 180,000; Full time

Job summary

Quest Diagnostics seeks an IT Security Technical Lead – Vulnerability Management to oversee the enterprise-wide vulnerability management program. You will lead policy, scanning, remediation tracking, and risk-based decision making across systems, applications, and cloud environments.

The role requires deep technical expertise, strategic oversight, and leadership to reduce organizational risk while aligning with HIPAA, PCI, and SOX requirements.

Qualifications

• Bachelor's degree in computer science, information security, or related discipline.
• 7+ years in IT security with 3+ years leading vulnerability or threat management.
• Experience with Qualys, Tenable, Wiz or equivalent vulnerability management tools.
• Hands-on network penetration testing experience for PCI environments.
• Strong understanding of CVSS, CVE, and CWE.
• Familiarity with remediation across Windows, Linux, networking, and cloud environments.
• Excellent communication and stakeholder management skills.
• Certifications such as CISSP, CISM, CISA, GPEN, or Qualys VMDR specialist.
• Experience in regulated industries (healthcare, financial or life sciences).
• Familiarity with ServiceNow, Archer, or similar GRC platforms for exception and risk tracking.
• Experience mentoring security engineers, specialists, or analysts.

Responsibilities

• Lead the global Vulnerability Management program, including policy management, scanning, reporting, and remediation tracking.
• Design and maintain a Vulnerability Management framework aligned with NIST, HIPAA, PCI, SOX, and related standards.
• Lead rapid assessment and remediation for zero-day vulnerabilities with impact analysis and prioritization.
• Serve as SME for Qualys or similar scanning platforms, ensuring accurate detection and reporting.
• Coordinate across Infrastructure, Application, and Risk teams to drive remediation activities.
• Define and monitor metrics and KPIs, and report progress to senior leadership.
• Develop dashboards and reports showing trends, SLA performance, and residual risk.
• Conduct ad-hoc vulnerability assessments with risk-based remediation recommendations.
• Provide guidance on vulnerability risk, security exceptions, and compensating controls.
• Support regulatory compliance by timely remediation tied to audit findings (HIPAA, PCI, SOX).
• Develop and deliver training, workshops, and awareness sessions.
• Continuously evaluate and implement processes and automation improvements.
• Conduct network penetration testing for PCI environments using CoreImpact or similar tools to validate controls.

Skills

Vulnerability management

Threat management

Stakeholder management

Security leadership

Communication skills

Education

Bachelor's degree in computer science / information security

Tools

Qualys

Tenable

Wiz

CoreImpact

Job description

Job Description

• IT Security Technical Lead – Vulnerability Management responsible for developing, leading, and continuously improving the enterprise-wide Vulnerability Management and Security Assessment program
• This role ensures that vulnerability management across systems, applications, and clouds are identified, assessed, prioritized, and remediated alignment with business risk and compliance objectives.
• The successful candidate will combine technical expertise, strategic oversight, and leadership skills to drive a measurable reduction in organizational risk while supporting Quest Diagnostics mission to protect data, systems, and customer

Responsibilities

• Lead the global Vulnerability Management program, including policy management, scanning, reporting, and remediation tracking.
• Design and maintain a comprehensive Vulnerability Management framework aligned with NIST, HIPAA, PCI, SOX, & etc.
• Lead rapid assessment and remediation efforts for Zero day vulnerabilities, including immediate impact analysis, exploitability review, and prioritization based on business risk.
• Server as Subject Matter Expert (SME) for Qualys, or similar scanning platforms - ensuring accurate detection, prioritization, and reporting of vulnerabilities.
• Partner and Infrastructure, Application, and Risk Teams to coordinate assessment and remediation activities across diverse environments.
• Define and monitor metrics and KPIs to evaluate program effectiveness and communicate progress to Senior leadership.
• Develop and maintain dashboard and reports highlighting trends, remediation SLA performance and residual risk posture
• Conduct ad-hoc vulnerability assessments and provide risk-based recommendations for remediation and mitigation
• Provide consultancy and guidance on Vulnerability risk, Security exception, and compensating controls to technical and business stakeholders.
• Support security compliance efforts by ensuring timely remediation of vulnerabilities tied to audit findings and regulatory frameworks (HIPAA, PCI, SOX).
• Develop and deliver training, workshops, and awareness sessions to improve understanding and accountability across teams.
• Continuously evaluate and implement process and automation improvement to enhance efficiency and reporting accuracy.
• Conduct network penetration testing for PCI environment using CoreImpact (Fortra) or similar tools to validate security controls and achieve regulatory compliance.

Qualifications

Required Work Experience:

• Bachelor's degree in computer science information security, or related discipline
• Minimum 7 years if experience in IT Security, including 3+ years leading a Vulnerability or Threat management program
• Proven experience with Qualys, Tenable, Wiz or equivalent vulnerability management tools.
• Hands on experience performing network penetration testing for PCI environments or equivalent
• Strong understanding of CVSS, CVE, & CWE
• Familiarity with remediation strategies across Windows, Linux Network, and Cloud environments
• Excellent Communication and stakeholder management skills with ability to convey risk to both technical and non-technical audiences.
• Certifications such as CISSP, CISM, CISA, GPEN, or Qualys VMDR specialist
• Experience in regulated industries (Healthcare, Financial or Life Sciences)
• Familiarity with ServiceNow, Archer, or similar GRC platforms for exception and risk tracking
• Experience leading and mentoring security engineers, specialists, or analysts.

Preferred Work Experience

• Develop and maintain custom scripts and API integrations to automate and streamline reporting and remediation workflows.
• Leverage Qualys CAR (Custom Assessment and Remediation) and optimize for efficient remediation and scanning.

53605

Quest Diagnostics honors our service members and encourages veterans to apply.

While we appreciate and value our staffing partners, we do not accept unsolicited resumes from agencies. Quest will not be responsible for paying agency fees for any individual as to whom an agency has sent an unsolicited resume.

Equal Opportunity Employer: Race/Color/Sex/Sexual Orientation/Gender Identity/Religion/National Origin/Disability/Vets or any other legally protected status.