Vulnerability Management & Security Operations Specialist

Key Responsibilities

• Vulnerability Management & Scanning
• Manage Qualys agent deployment and lifecycle in collaboration with the IT Asset Management (ITAM) team
• Conduct and govern scheduled vulnerability scans: + Weekly internal scans + Monthly external scans
• Ensure scan coverage, accuracy, and alignment with organizational policies
• Remediation Governance & Execution
• Drive wave-based remediation pipeline, including: + Planning and prioritization + Validation in test environments + Defined acceptance criteria before production rollout
• Lead criticality-based remediation strategy: + Prioritize Critical → High → Medium vulnerabilities
• Conduct post-remediation validation through Qualys re-scanning
• Risk & Exception Management
• Manage exceptions and compensating controls with proper documentation and approvals
• Coordinate risk acceptance processes with stakeholders and security leadership
• Ensure audit readiness and compliance with internal and regulatory standards
• Patch & Compliance Monitoring
• Track and enforce patch compliance across systems
• Publish monthly security posture and compliance reports to the CISO office
• Identify trends, gaps, and improvement areas in patching and vulnerability closure
• System Hardening & Security Improvements
• Drive hardening initiatives for system images and configurations
• Support manual remediation and configuration-fix workflows where automation is not feasible
• Collaborate with engineering teams to institutionalize secure baselines
• Segmentation & Security Posture Management
• Implement and manage asset segmentation (Red / Yellow / Green classification)
• Enable lab manager and environment-level security controls
• Establish and maintain audit cadence for continuous improvement