Qualys Configuration Compliance Engineer — Security Automation

Cognizant; Charlotte (NC); On-site; USD 108,000 - 128,000; Full time

Benefits offered by this job

Medical/Dental/Vision/Life Insurance

Paid holidays and PTO

401(k) plan and contributions

Long-term/Short-term Disability

Paid Parental Leave

Employee Stock Purchase Plan

Job summary

Cognizant is seeking a Qualys Configuration Compliance Specialist to support enterprise configuration compliance and attack surface management. You will design, implement, and manage secure baselines using Qualys, working closely with infrastructure, security, and technology teams to assess and remediate gaps.

The role requires strong expertise in Qualys, security frameworks, system administration, and automation scripting, with a focus on Windows, Unix/Linux, networks, and databases.

Qualifications

• 5-8 years of experience in cybersecurity or related fields.
• Strong hands-on experience with Qualys Configuration Compliance including policy creation, scanning, reporting, and remediation tracking.
• Familiarity with CIS Benchmarks, NIST, and enterprise security standards.

Responsibilities

• Serve as SME for Qualys Configuration Compliance and Attack Surface Management initiatives.
• Design, implement, and maintain configuration compliance policies.
• Perform compliance assessments and baseline validation using Qualys capabilities.
• Analyze findings and remediate non-compliant systems with technology teams.
• Develop automation scripts to streamline assessments and reporting.

Skills

Cybersecurity

Vulnerability Management

Configuration Compliance

Security Engineering

Scripting & Automation

Qualys Configuration Compliance

Attack Surface Management

Tools

Qualys Configuration Compliance

Qualys VMDR

Job description

Cognizant is seeking a Qualys Configuration Compliance Specialist to support enterprise configuration compliance and attack surface management. You will design, implement, and manage secure baselines using Qualys, working closely with infrastructure, security, and technology teams to assess and remediate gaps.

The role requires strong expertise in Qualys, security frameworks, system administration, and automation scripting, with a focus on Windows, Unix/Linux, networks, and databases.