Vulnerability Engineer — VMDR Specialist (Contract)

Themesoft Inc; Dallas (TX); On-site; USD 83,000 - 131,000; Full time

Job summary

Themesoft Inc seeks an experienced Vulnerability Engineer to lead vulnerability management across on‑prem and cloud environments using Qualys VMDR. The role emphasizes hands‑on assessment, risk prioritization, and clear reporting to security leadership.

Required: bachelor's degree in CS or related field, 3–5 years in vulnerability management, strong knowledge of CVSS, NIST/CIS/ISO 27001, and scripting in Python/PowerShell/Bash. In-person interview in Dallas area.

Qualifications

• Bachelor's degree in computer science, information security, or related field.
• 3–5 years of experience in vulnerability management and security operations.
• Hands-on experience with Qualys VMDR (Vulnerability Management, Detection and Response).
• Strong understanding of vulnerability assessment methodologies, CVSS scoring, and security frameworks (NIST, CIS, ISO 27001).
• Experience with Windows, Linux, and cloud platforms (AWS, Azure, GCP).
• Knowledge of scripting languages such as Python, PowerShell, or Bash.

Responsibilities

• Perform vulnerability assessments and analyse scan results across servers, endpoints, network devices, cloud environments, and applications.
• Configure and manage Qualys scanners, scanner appliances, agents, and scan schedules.
• Administer and maintain the Qualys platform, including VMDR, Policy Compliance, Patch Management, and Asset Inventory modules.
• Prioritize vulnerabilities based on risk, CVSS scores, threat intelligence, and business impact.
• Coordinate with infrastructure, application, and cloud teams to drive remediation efforts.
• Develop dashboards, reports, and metrics for security leadership and stakeholders.
• Monitor compliance against security policies and regulatory requirements.
• Automate vulnerability management processes using APIs, scripting, and integrations.

Skills

Qualys VMDR

Vulnerability management

Cloud platforms

Windows/Linux

Scripting languages

Network security basics

CVSS & risk

Education

Bachelor's degree in CS or related field

Tools

Qualys VMDR

Job description

Themesoft Inc seeks an experienced Vulnerability Engineer to lead vulnerability management across on‑prem and cloud environments using Qualys VMDR. The role emphasizes hands‑on assessment, risk prioritization, and clear reporting to security leadership.

Required: bachelor's degree in CS or related field, 3–5 years in vulnerability management, strong knowledge of CVSS, NIST/CIS/ISO 27001, and scripting in Python/PowerShell/Bash. In-person interview in Dallas area.