Senior Vulnerability Management Specialist (Qualys VMDR & QGS Expert)

Role Summary

We are seeking a highly skilled Vulnerability Management (VM) Specialist with deep expertise in Qualys VMDR, Qualys Gateway Service (QGS), enterprise vulnerability remediation programs, executive reporting, and QGS migration projects. The candidate will lead vulnerability management operations across large-scale enterprise environments, drive risk-based remediation initiatives, optimize scanning infrastructure, and provide actionable security insights to management.

Ideal Candidate Profile

8-10 years in Vulnerability Management.

7+ years of hands-on Qualys VMDR administration.

Proven experience in QGS migrations and deployment projects.

Experience managing environments with 20,000+ assets.

Strong stakeholder management and executive reporting skills.

Ability to lead vulnerability review meetings and remediation governance programs.

Key Responsibilities

Vulnerability Management OPS and implementation.

Lead enterprise-wide Vulnerability Management program using Qualys VMDR.

Own the complete vulnerability lifecycle:

Discovery

Assessment

Prioritization

Remediation Tracking

Validation

Reporting

Develop risk-based remediation strategies aligned with business priorities.

Review and validate Critical, High, and Zero-Day vulnerabilities.

Drive vulnerability reduction initiatives and SLA compliance programs.

Conduct vulnerability trend analysis and management reviews.

Qualys VMDR Administration

Serve as Subject Matter Expert (SME) for Qualys VMDR.

Design and maintain:

Asset Groups

Dynamic Tags

Business Units

Scan Profiles

Option Profiles

Remediation Policies

Manage authenticated scanning for:

Windows

Linux

Network Devices

Databases

Optimize scan performance and asset coverage.

Troubleshoot scanning failures and credential issues.

Manage VMDR Dashboards and Reporting Frameworks.

Qualys Gateway Service (QGS) Migration & Management

Primary Focus Area

Lead QGS migration projects from On-Prem to Cloud environments.

Responsibilities

Design migration architecture for Qualys Gateway Services.

Install, configure, upgrade, and maintain QGS infrastructure.

Perform migration planning, testing, deployment, and rollback activities.

Conduct connectivity validation and health checks.

Validate scanner communication between:

Qualys Cloud Platform

Internal Assets

Remote Networks

Troubleshoot:

Connectivity issues

Certificate issues

Firewall restrictions

Network routing issues

Coordinate with:

Network Teams

Cloud Teams

Infrastructure Teams

Develop QGS migration runbooks and operational documentation.

Perform post-migration health checks and stabilization activities.

Develop migration runbooks and operational documentation.

Expected Experience

Multiple QGS deployment and migration projects.

Hybrid cloud environments.

Azure, AWS, OCI, VMware environments.

Proxy and firewall integrations.

 Executive Reporting & Metrics

Must Have Expertise

Build Executive Vulnerability Dashboards.

Present cyber risk posture to leadership teams.

Track and report:

Total Vulnerabilities

Critical Vulnerabilities

High Vulnerabilities

Remediation Trends

SLA Compliance

Asset Coverage

Scan Coverage

Vulnerability Aging

Risk Reduction Metrics

Reporting Tools

Qualys Reporting

Power BI

Excel Dashboards

ServiceNow Reporting

Sample Reports

Weekly Executive Security Dashboard

Monthly Vulnerability Review

Risk-Based Prioritization Reports

Regulatory Compliance Reports

KPI/KRI Reports

Vulnerability Trending Analysis

 Vulnerability Remediation Governance

Coordinate remediation activities with:

Windows Teams

Linux Teams

Network Teams

Application Owners

Conduct remediation review meetings.

Monitor SLA adherence.

Define remediation priorities based on:

CVSS

EPSS

Exploit Availability

Asset Critical…