Sr Vulnerability Management Specialist (Qualys VMDR & QGS Expert)
Zensar Technologies · Bengaluru · onsite · Posted 31d ago
Undisclosed8–10 yrsfulltimeSourced from
About a minute. You'll make an account on the way through.
About this role
Job Title
Senior Vulnerability Management Specialist (Qualys VMDR QGS Expert)
Location: Bangalore
Role Summary
We are seeking a highly skilled Vulnerability Management (VM) Specialist with deep expertise in Qualys VMDR, Qualys Gateway Service (QGS), enterprise vulnerability remediation programs, executive reporting, and QGS migration projects. The candidate will lead vulnerability management operations across large-scale enterprise environments, drive risk-based remediation initiatives, optimize scanning infrastructure, and provide actionable security insights to management.
Ideal Candidate Profile
- 8-10 years in Vulnerability Management.
- 7+ years of hands-on Qualys VMDR administration.
- Proven experience in QGS migrations and deployment projects.
- Experience managing environments with 20,000+ assets.
- Strong stakeholder management and executive reporting skills.
- Ability to lead vulnerability review meetings and remediation governance programs.
Key Responsibilities
Vulnerability Management OPS and implementation.
- Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
- Own the complete vulnerability lifecycle:
- Discovery
- Assessment
- Prioritization
- Remediation Tracking
- Validation
- Reporting
- Develop risk-based remediation strategies aligned with business priorities.
- Review and validate Critical, High, and Zero-Day vulnerabilities.
- Drive vulnerability reduction initiatives and SLA compliance programs.
- Conduct vulnerability trend analysis and management reviews.
Qualys VMDR Administration
- Serve as Subject Matter Expert (SME) for Qualys VMDR.
- Design and maintain:
- Asset Groups
- Dynamic Tags
- Business Units
- Scan Profiles
- Option Profiles
- Remediation Policies
- Manage authenticated scanning for:
- Windows
- Linux
- Network Devices
- Databases
- Optimize scan performance and asset coverage.
- Troubleshoot scanning failures and credential issues.
- Manage VMDR Dashboards and Reporting Frameworks.
Qualys Gateway Service (QGS) Migration Management
Primary Focus Area
- Lead QGS migration projects from On-Prem to Cloud environments.
Responsibilities
- Design migration architecture for Qualys Gateway Services.
- Install, configure, upgrade, and maintain QGS infrastructure.
- Perform migration planning, testing, deployment, and rollback activities.
- Conduct connectivity validation and health checks.
- Validate scanner communication between:
- Qualys Cloud Platform
- Internal Assets
- Remote Networks
- Troubleshoot:
- Connectivity issues
- Certificate issues
- Firewall restrictions
- Network routing issues
- Coordinate with:
- Network Teams
- Cloud Teams
- Infrastructure Teams
- Develop QGS migration runbooks and operational documentation.
- Perform post-migration health checks and stabilization activities.
- Develop migration runbooks and operational documentation.
Expected Experience
- Multiple QGS deployment and migration projects.
- Hybrid cloud environments.
- Azure, AWS, OCI, VMware environments.
- Proxy and firewall integrations.
Executive Reporting Metrics
Must Have Expertise
- Build Executive Vulnerability Dashboards.
- Present cyber risk posture to leadership teams.
- Track and report:
- Total Vulnerabilities
- Critical Vulnerabilities
- High Vulnerabilities
- Remediation Trends
- SLA Compliance
- Asset Coverage
- Scan Coverage
- Vulnerability Aging
- Risk Reduction Metrics
Reporting Tools
- Qualys Reporting
- Power BI
- Excel Dashboards
- ServiceNow Reporting
Sample Reports
- Weekly Executive Security Dashboard
- Monthly Vulnerability Review
- Risk-Based Prioritization Reports
- Regulatory Compliance Reports
- KPI/KRI Reports
- Vulnerability Trending Analysis
Vulnerability Remediation Governance
- Coordinate remediation activities with:
- Windows Teams
- Linux Teams
- Network Teams
- Application Owners
- Conduct remediation review meetings.
- Monitor SLA adherence.
- Define remediation priorities based on:
- CVSS
- EPSS
- Exploit Availability
- Asset Criticality
- Validate fixes through rescanning.
Automation Integration
- Utilize Qualys APIs for automation.
- Integrate Qualys with:
- ServiceNow
- Jira
- CMDB
- SIEM Platforms
- Develop scripts using:
- PowerShell
- Python
- Automate reporting and remediation tracking.
Required Skills
Vulnerability Management
- Vulnerability Lifecycle Management
- Risk-Based Vulnerability Management
- CVSS v3/v4
- Vulnerability Prioritization
- Remediation Validation
- Executive Reporting
- Audit Support
Qualys Expertise
- Qualys VMDR
- Qualys Gateway Service (QGS)
- Asset Management
- Policy Compliance
- Patch Management Module
- Report Templates
- Dynamic Tagging
- Cloud Agents
- Scanner Appliances
- VMDR Dashboards
Operating Systems
- Windows Server
- Linux (RHEL, CentOS, Ubuntu)
- Active Directory
- DNS
- DHCP
Cloud Platforms
- Azure
- AWS
- Oracle Cloud (OCI)
- VMware
- Hybrid Cloud
Tools
- Qualys VMDR
- ServiceNow
- Power BI
- Excel
- Splunk / Sentinel
- Jira
Preferred Certifications
- Qualys VMDR Specialist
- Qualys Certified Professional
- CISSP
- CEH
- Security+
- Microsoft Azure Security Certifications
Good-to-Have
Armis Asset Intelligence Exposure Management
Required Armis Experience
- Administer and support Armis platform deployments.
- Perform enterprise asset discovery and inventory management.
- Monitor managed, unmanaged, IoT and OT assets.
- Identify vulnerable, rogue, and end-of-life assets.
- Correlate asset intelligence with Qualys vulnerability findings.
- Leverage Armis for attack surface visibility and cyber asset exposure management.
- Track device ownership and remediation accountability.
- Create exposure-based risk reports using Armis insights.
- Monitor:
- IoT Devices
- Network Infrastructure
- Endpoints
- Cloud-connected Assets
Armis Integrations
- Qualys VMDR
- ServiceNow CMDB
- Microsoft Sentinel
- Splunk
- CrowdStrike
- Active Directory
Preferred Certifications
- Qualys VMDR Specialist
- Qualys Certified Professional
- CISSP
- CEH
- Security+
- Microsoft Azure Security Certifications
Good-to-Have
Armis Asset Intelligence Exposure Management
Required Armis Experience
- Administer and support Armis platform deployments.
- Perform enterprise asset discovery and inventory management.
- Monitor managed, unmanaged, IoT and OT assets.
- Identify vulnerable, rogue, and end-of-life assets.
- Correlate asset intelligence with Qualys vulnerability findings.
- Leverage Armis for attack surface visibility and cyber asset exposure management.
- Track device ownership and remediation accountability.
- Create exposure-based risk reports using Armis insights.
- Monitor:
- IoT Devices
- Network Infrastructure
- Endpoints
- Cloud-connected Assets
Armis Integrations
- Qualys VMDR
- ServiceNow CMDB
- Microsoft Sentinel
- Splunk
- CrowdStrike
- Active Directory
Key Responsibilities
Vulnerability Management OPS and implementation.
- Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
- Own the complete vulnerability lifecycle:
- Discovery
- Assessment
- Prioritization
- Remediation Tracking
- Validation
- Reporting
- Develop risk-based remediation strategies aligned with business priorities.
- Review and validate Critical, High, and Zero-Day vulnerabilities.
- Drive vulnerability reduction initiatives and SLA compliance programs.
- Conduct vulnerability trend analysis and management reviews.
- Qualys VMDR Administration
- Serve as Subject Matter Expert (SME) for Qualys VMDR.
- Design and maintain:
- Asset Groups
- Dynamic Tags
- Business Units
- Scan Profiles
- Option Profiles
- Remediation Policies
- Manage authenticated scanning for:
- Windows
- Linux
- Network Devices
- Databases
- Optimize scan performance and asset coverage.
- Troubleshoot scanning failures and credential issues.
- Manage VMDR Dashboards and Reporting Frameworks.
- Qualys Gateway Service (QGS) Migration Management
- Primary Focus Area
- Lead QGS migration projects from On-Prem to Cloud environments.
- Responsibilities
- Design migration architecture for Qualys Gateway Services.
- Install, configure, upgrade, and maintain QGS infrastructure.
- Perform migration planning, testing, deployment, and rollback activities.
- Conduct connectivity validation and health checks.
- Validate scanner communication between:
- Qualys Cloud Platform
- Internal Assets
- Remote Networks
- Troubleshoot:
- Connectivity issues
- Certificate issues
- Firewall restrictions
- Network routing issues
- Coordinate with:
- Network Teams
- Cloud Teams
- Infrastructure Teams
- Develop QGS migration runbooks and operational documentation.
- Perform post-migration health checks and stabilization activities.
- Develop migration runbooks and operational documentation.
- Expected Experience
- Multiple QGS deployment and migration projects.
- Hybrid cloud environments.
- Azure, AWS, OCI, VMware environments.
- Proxy and firewall integrations.
- Executive Reporting Metrics
- Must Have Expertise
- Build Executive Vulnerability Dashboards.
- Present cyber risk posture to leadership teams.
- Track and report:
- Total Vulnerabilities
- Critical Vulnerabilities
- High Vulnerabilities
- Remediation Trends
- SLA Compliance
- Asset Coverage
- Scan Coverage
- Vulnerability Aging
- Risk Reduction Metrics
- Reporting Tools
- Qualys Reporting
- Power BI
- Excel Dashboards
- ServiceNow Reporting
- Sample Reports
- Weekly Executive Security Dashboard
- Monthly Vulnerability Review
- Risk-Based Prioritization Reports
- Regulatory Compliance Reports
- KPI/KRI Reports
- Vulnerability Trending Analysis
- Vulnerability Remediation Governance
- Coordinate remediation activities with:
- Windows Teams
- Linux Teams
- Network Teams
- Application Owners
- Conduct remediation review meetings.
- Monitor SLA adherence.
- Define remediation priorities based on:
- CVSS
- EPSS
- Exploit Availability
- Asset Criticality
- Validate fixes through rescanning.
- Automation Integration
- Utilize Qualys APIs for automation.
- Integrate Qualys with:
- ServiceNow
- Jira
- CMDB
- SIEM Platforms
- Develop scripts using:
- PowerShell
- Python
- Automate reporting and remediation tracking.
- Required Skills
- Vulnerability Management
- Vulnerability Lifecycle Management
- Risk-Based Vulnerability Management
- CVSS v3/v4
- Vulnerability Prioritization
- Remediation Validation
- Executive Reporting
- Audit Support
- Qualys Expertise
- Qualys VMDR
- Qualys Gateway Service (QGS)
- Asset Management
- Policy Compliance
- Patch Management Module
- Report Templates
- Dynamic Tagging
- Cloud Agents
- Scanner Appliances
- VMDR Dashboards
- Operating Systems
- Windows Server
- Linux (RHEL, CentOS, Ubuntu)
- Active Directory
- DNS
- DHCP
- Cloud Platforms
- Azure
- AWS
- Oracle Cloud (OCI)
- VMware
- Hybrid Cloud
- Tools
- Qualys VMDR
- ServiceNow
- Power BI
- Excel
- Splunk / Sentinel
- Jira
Disclaimer: This job posting has been aggregated from external source. Role details, content, and availability are subject to change. Applicants are advised to confirm the latest information directly on the company website before applying.
Sourced from naukri
Skills
AutomationCyberDNSActive Directorycloud platformsapisAsset Managementcloud platformamazon web servicescehCentosCMDBcisspDashboardCYBER RISKAudit SupportCrowdstrikedeploymentcloudArchitectureAdministrationcomplianceMicrosoft Azure
About Zensar Technologies
Zensar Technologies
IT Services & Consulting
10.0k+
employees
2001
25 years old
Pune, Maharashtra
India
About
Zensar is a global organization that conceptualizes, builds, and manages digital products through experience design, data engineering, and advanced analytics for leading companies.
Industries
IT Services & Consulting
Employee ratings
2,994 reviews
3.7/ 5
Culture
3.5
Career growth
3.0
Work-life
3.8
Employees rate it well for
Work Life Balance442Work Culture366Senior Management300Salary295Job Security229
Find them on