Onsite-Locals_Qualys Vulnerability Management Engineer_ PA, TX

Themesoft Inc; Dallas (Luzerne County); On-site; USD 110,000 - 160,000; Part time

Job summary

Themesoft Inc is seeking a Senior Qualys Vulnerability Management Engineer for an onsite, 6-month engagement across Malvern, PA and Dallas, TX. Requires 5–7 years in vulnerability management with hands-on Qualys VMDR experience.

You will manage Qualys modules, perform comprehensive scans, coordinate remediation, and deliver dashboards to security leadership. Strong scripting and cloud skills (AWS/Azure/GCP) are a plus, focusing on enterprise security compliance.

Qualifications

• Bachelor's degree required in CS/InfoSec or related field.
• 5–7 years in Vulnerability Management and Security Operations with hands-on Qualys.
• Hands-on experience with Qualys VMDR, Policy Compliance, Patch Management.
• Understanding CVSS, risk prioritization, and remediation coordination.
• Knowledge of NIST, CIS, ISO 27001; patching and hardening practices.
• Experience with Windows, Linux, and cloud platforms (AWS/Azure/GCP).
• Scripting in Python/PowerShell/Bash; API integrations for automation.

Responsibilities

• Administer, configure, and maintain the Qualys platform including VMDR, Policy Compliance, Patch Management, and Asset Inventory.
• Configure Qualys scanners, appliances, agents, and scheduled scans.
• Perform vulnerability assessments across servers, endpoints, network devices, and cloud envs.
• Analyze results, validate findings, and recommend remediation actions.
• Prioritize vulnerabilities by CVSS, threat intel, asset criticality, and business impact.
• Coordinate remediation with infrastructure, app, network, and cloud teams.
• Develop dashboards and reports for security leadership and stakeholders.
• Ensure compliance with enterprise security policies and regulatory requirements.
• Automate vulnerability workflows using APIs and scripting.
• Monitor trends, optimize scanning configurations, and improve coverage.

Skills

Vulnerability Management

Security Operations

Python

PowerShell

Bash

Networking fundamentals

Cloud platforms

Vulnerability assessment

Education

Bachelor's degree in Computer Science, Information Security, or related

Tools

Qualys VMDR

Policy Compliance

Patch Management

Asset Inventory

AWS

Azure

GCP

Job description

Onsite-Locals_Qualys Vulnerability Management Engineer_ PA, TX

Job Id : OOJ - 27611

Posted Date : 10/15/2026

Experience : -

Job Type : Contractual

Location : DALLAS,Malvern, PA

Overview :

Title: Senior Qualys Vulnerability Management Engineer
Location:Malvern, PA/Dallas, TX(Onsite)
Work Arrangement: Onsite
Employment Type: Contract
Duration: 6 Months
Primary Skills: Qualys VMDR, Security Compliance & Frameworks, Vulnerability Management & Risk Assessment
We are seeking an experienced Senior Qualys Vulnerability Management Engineer with 5–7 years of experience in Vulnerability Management and Security Operations. The ideal candidate will have strong hands‑on expertise in the Qualys VMDR platform, vulnerability assessment, risk prioritization, remediation coordination, and security compliance. The candidate will be responsible for managing vulnerability scanning operations, improving security posture, automating processes, and ensuring compliance with enterprise security standards.

Required Skills and Qualifications

• Bachelor’s degree in Computer Science, Information Security, or a related field.
• 5–7 years of experience in Vulnerability Management and Security Operations, with hands‑on experience as a Qualys Senior Engineer.
• Strong hands‑on experience with Qualys VMDR (Vulnerability Management, Detection and Response).
• Experience with Qualys modules, including Policy Compliance, Patch Management, and Asset Inventory.
• Strong understanding of vulnerability assessment methodologies, CVSS scoring, risk assessment, and vulnerability prioritization.
• Knowledge of security frameworks and standards, including NIST, CIS, and ISO 27001.
• Understanding of patch management processes, network security, system hardening, and security operations.
• Experience working with Windows, Linux, and cloud platforms such as AWS, Azure, and GCP.
• Strong knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, Active Directory, and related network protocols.
• Experience with scripting languages such as Python, PowerShell, or Bash.
• Familiarity with APIs and integrations for automating vulnerability management processes.
• Strong analytical, troubleshooting, communication, and problem‑solving skills.
• Ability to assess technical security risks and communicate findings and remediation recommendations to technical teams and business stakeholders.

Roles and Responsibilities

• Administer, configure, and maintain the Qualys platform, including VMDR, Policy Compliance, Patch Management, and Asset Inventory modules.
• Configure and manage Qualys scanners, scanner appliances, agents, and scheduled vulnerability scans.
• Perform vulnerability assessments across servers, endpoints, network devices, cloud environments, and applications.
• Analyze vulnerability scan results, validate findings, identify security gaps, and recommend appropriate remediation actions.
• Prioritize vulnerabilities based on CVSS scores, exploitability, threat intelligence, asset criticality, and business impact.
• Collaborate with infrastructure, application, network, and cloud teams to coordinate and track vulnerability remediation activities.
• Develop and maintain dashboards, reports, and key performance metrics to communicate vulnerability status and remediation progress to security leadership and stakeholders.
• Monitor compliance with enterprise security policies, industry standards, and regulatory requirements.
• Conduct asset discovery activities and maintain accurate, up-to-date asset inventories within the Qualys platform.
• Support security audits, risk assessments, compliance reviews, and vulnerability management initiatives.
• Automate vulnerability management workflows using APIs, scripting, and integrations with enterprise security and IT management tools.
• Troubleshoot scanner configuration issues, scan failures, agent connectivity problems, and other operational challenges.
• Optimize scanning configurations, schedules, and performance to improve vulnerability coverage and detection efficiency.
• Track remediation progress, identify recurring vulnerabilities, and recommend continuous improvements to vulnerability management processes.
• Stay up to date with emerging vulnerabilities, cybersecurity threats, exploitation trends, and new Qualys platform features and capabilities.

Preferred Qualifications

• Experience managing vulnerability programs in large enterprise environments.
• Familiarity with vulnerability remediation SLAs, exception management, and risk acceptance processes.
• Experience integrating Qualys with ticketing systems, SIEM platforms, and IT service management tools.
• Understanding of cloud security posture, asset exposure, and vulnerability management across hybrid infrastructure.
• Relevant Qualys certifications or other recognized cybersecurity certifications are an advantage

Work Authorization

Applicants must be legally authorized to work in the United States.

Equal Employment Opportunity

Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.

Skills

• WINDOWS
• PYTHON
• AZURE
• NETWORKING
• POWERSHELL
• QUALYS
• VULNERABILITY MANAGEMENT
• ASSESSMENT METHODOLOGIES
• HTTP
• AWS
• LINUX