Key Responsibilities:

• Patch Management:
  • Develop and manage the patch management process for all systems and applications.
  • Ensure timely and effective deployment of patches to mitigate vulnerabilities.
  • Monitor and report on patch compliance across the organization.
• Qualys Administration:
  • Administer and manage the Qualys platform, including configuration, scanning, and reporting.
  • Conduct regular vulnerability scans and assessments using Qualys.
  • Analyze scan results and coordinate with IT teams to prioritize and remediate vulnerabilities.
• Security and Compliance:
  • Ensure all systems comply with security policies, standards, and regulatory requirements.
  • Implement best practices for vulnerability management and patching.
  • Assist in audits and assessments related to security and compliance.
• System Administration:
  • Troubleshoot and resolve issues related to patching and vulnerability management.
  • Collaborate with other IT teams to ensure seamless integration of security practices.
• Documentation and Reporting:
  • Create and maintain detailed documentation of patching processes, schedules, and policies.
  • Generate and present reports on vulnerability status, patch compliance, and risk assessments to senior management.
• Continuous Improvement:
  • Stay current with the latest security threats, vulnerabilities, and industry trends.
  • Recommend and implement improvements to the patch management and vulnerability scanning processes.

Qualifications:

• Education:
  • Bachelor's degree in Computer Science, Information Technology, Cybersecurity, or a related field; or equivalent work experience.
• Experience:
  • Minimum of 7 years of experience in IT security, system administration, or a similar role.
  • At least 3 years of hands-on experience with Qualys or similar vulnerability management tools.
• Technical Skills:
  • Strong understanding of patch management processes and tools.
  • Proficiency in Windows and Linux server environments.
  • Familiarity with network protocols and services (TCP/IP, DNS, DHCP).
  • Knowledge of scripting languages (PowerShell, Python) for automation.
  • Experience with other security tools and platforms is a plus.
• Certifications:
  • Relevant certifications such as Qualys Certified Specialist, CISSP, CompTIA Security , or similar are highly desirable.