Vulnerability Management & Security Assessment Engineer (L2) – Qualys VMDR

Gruve; San Francisco (CA); In loco; USD 120.000 - 180.000; Tempo pieno

Descrizione del lavoro

Gruve is seeking a Security Operations professional to manage vulnerability scanning, assessment reviews, remediation tracking, and incident handling. The role focuses on evidence validation, coordinating across Server/Network/DB/Cloud teams, and ensuring compliance reporting.

You will support 24x7 operations with rotation across APAC, EMEA, and NLAM regions. Ideal candidates have 3–6 years in cloud infra operations, hands-on Qualys VMDR experience, and strong ITSM and security assessment

Competenze

• 3–6 years of experience in cloud infrastructure operations and production support.
• Hands-on experience with Qualys VMDR or equivalent vulnerability management tools.
• Strong understanding of CVEs, CVSS, vulnerability scanning and remediation validation.
• Experience with security assessments, technical evidence reviews and control gap identification.
• Knowledge of Windows/Linux, networking, databases, cloud and enterprise IT environments.
• Experience with ServiceNow or equivalent ITSM tools, reporting and SLA management.
• Global 24x7x365 support across multiple regions, with rotational shifts.

Mansioni

• Vulnerability Management Operations (Scanning & Analysis) including troubleshooting and remediation validation.
• Coordinate technical security assessments and infrastructure control reviews.
• Track remediation activities across teams and monitor SLAs.
• Generate vulnerability, remediation aging, and compliance reports.
• Troubleshoot platform incidents and follow ITIL processes; drive process improvements.

Conoscenze

Cloud infrastructure operations

Azure / AWS

Qualys VMDR

CVEs & CVSS

ITSM (ServiceNow)

Windows / Linux

Security incident handling

SLA management

Documentation & coordination

Formazione

Bachelor's degree in IT / related field

Strumenti

Qualys VMDR

ServiceNow

Descrizione del lavoro

About Gruve

Gruve is an innovative software services startup dedicated to transforming enterprises to AI powerhouses. We specialize in cybersecurity, customer experience, cloud infrastructure, and advanced technologies such as Large Language Models (LLMs). Our mission is to assist our customers in their business strategies utilizing their data to make more intelligent decisions. As a well-funded early-stage startup, Gruve offers a dynamic environment with strong customer and partner networks.

Position summary:

Responsible for enterprise InfoSec operations covering vulnerability scanning and analysis, security assessments, control reviews, remediation validation, compliance reporting and incident management. The role focuses on technical troubleshooting, evidence validation, remediation coordination and continuous operational improvement.

Key Responsibilities:

Vulnerability Management Operations (Scanning & Analysis)

• Administer and troubleshoot vulnerability scans using Qualys VMDR or equivalent platforms.
• Investigate scan failures, authentication issues, scanner connectivity and asset discovery gaps.
• Analyze CVEs, CVSS severity, affected assets and vulnerability trends.
• Validate asset coverage and investigate discrepancies in scan results.
• Support risk-based prioritization based on severity, exploitability, asset criticality and remediation SLAs.
• Investigate recurring findings and potential false positives; coordinate with Security SMEs as required.

Security Assessment & Review Support

• Coordinate technical security assessments and infrastructure control reviews.
• Review evidence for access management, patching, configuration compliance, logging and backup controls.
• Validate submitted evidence against defined security requirements and assessment checklists.
• Identify control gaps, missing evidence, policy deviations and compliance issues.
• Coordinate with infrastructure and application owners to resolve assessment observations.
• Maintain assessment records and elevate complex control interpretation issues to Security or Risk SMEs.

Remediation Tracking & SLA Monitoring (Including Rescan Validation)

• Coordinate remediation activities with Server, Network, Database, Cloud and Application teams.
• Track vulnerability aging, action owners, remediation deadlines and SLA breaches.
• Review remediation plans and follow up on overdue critical and high-severity findings.
• Validate remediation through rescans and review updated vulnerability status.
• Investigate recurring vulnerabilities and discrepancies between remediation claims and scan results.
• Track exceptions and elevate unresolved findings for appropriate risk review and approval.

Compliance Reporting & Audit Support

• Generate vulnerability, remediation aging, assessment status and compliance reports.
• Analyze trends, overdue findings, SLA breaches and recurring control deficiencies.
• Maintain vulnerability registers, assessment trackers, dashboards and evidence repositories.
• Support internal and external audits by coordinating and validating technical evidence.
• Track compliance against organizational security policies and applicable control frameworks.
• Recommend improvements to reporting accuracy, evidence quality and audit readiness.

Incident & Service Management (Including Improvement)

• Troubleshoot complex vulnerability management platform and assessment workflow incidents.
• Perform root-cause analysis for recurring scan failures, authentication issues and reporting discrepancies.
• Manage incidents and service requests within defined SLAs using approved ITSM workflows.
• Follow ITIL Incident, Problem, Change and Request Management processes, as applicable.
• Maintain SOPs, runbooks, knowledge articles and shift handover documentation; provide guidance to L1.
• Identify automation opportunities, recurring operational gaps and process improvements; coordinate implementation through approved change procedures.

Required Skills & Qualifications:

• 3–6 years of experience in cloud infrastructure operations, administration and production support across Microsoft Azure and/or AWS environments.
• Hands-on experience with Qualys VMDR or equivalent vulnerability management tools.
• Strong understanding of CVEs, CVSS, vulnerability scanning and remediation validation.
• Experience with security assessments, technical evidence reviews and control gap identification.
• Knowledge of Windows/Linux, networking, databases, cloud and enterprise IT environments.
• Experience with ServiceNow or equivalent ITSM tools, reporting and SLA management.
• Strong troubleshooting, analytical, documentation and stakeholder coordination skills.
• Global 24x7x365 support across APAC, EMEA and NLAM, with rotational shifts and follow-the-sun handovers.

Preferred Skills & Qualifications:

• Qualys certification or exposure to Qualys Policy Compliance and related modules.
• Knowledge of ISO 27001, SOC 2, CIS Benchmarks or other security frameworks.
• Exposure to GRC platforms, audit management and risk exception workflows.
• Basic scripting skills in PowerShell, Python or Shell.
• Experience with security dashboards, automation and operational process improvement.
• Security+, ITIL or relevant information security certifications.

Key Competencies

Qualys VMDR | Vulnerability Analysis | Security Assessments | Evidence Validation | Remediation Tracking | Rescan Validation | Compliance Reporting | Root-Cause Analysis | ITSM | SLA Management | Continuous Improvement | Global 24x7 Operations

Why Gruve

At Gruve, we foster a culture of innovation, collaboration, and continuous learning. We are committed to building a diverse and inclusive workplace where everyone can thrive and contribute their best work. If you’re passionate about technology and eager to make an impact, we’d love to hear from you.

Gruve is an equal opportunity employer. We welcome applicants from all backgrounds and thank all who apply; however, only those selected for an interview will be contacted.