Onsite-Locals_Qualys Vulnerability Management Engineer_ PA, TX

Title: Senior Qualys Vulnerability Management Engineer
Location: Malvern, PA/Dallas, TX (Onsite)
Work Arrangement: Onsite
Employment Type: Contract
Duration: 6 Months
Primary Skills: Qualys VMDR, Security Compliance & Frameworks, Vulnerability Management & Risk Assessment
We are seeking an experienced Senior Qualys Vulnerability Management Engineer with 5-7 years of experience in Vulnerability Management and Security Operations. The ideal candidate will have strong hands-on expertise in the Qualys VMDR platform, vulnerability assessment, risk prioritization, remediation coordination, and security compliance. The candidate will be responsible for managing vulnerability scanning operations, improving security posture, automating processes, and ensuring compliance with enterprise security standards.
Required Skills and Qualifications
Bachelor’s degree in Computer Science, Information Security, or a related field.
5-7 years of experience in Vulnerability Management and Security Operations, with hands-on experience as a Qualys Senior Engineer.
Strong hands-on experience with Qualys VMDR (Vulnerability Management, Detection and Response).
Experience with Qualys modules, including Policy Compliance, Patch Management, and Asset Inventory.
Strong understanding of vulnerability assessment methodologies, CVSS scoring, risk assessment, and vulnerability prioritization.
Knowledge of security frameworks and standards, including NIST, CIS, and ISO 27001.
Understanding of patch management processes, network security, system hardening, and security operations.
Experience working with Windows, Linux, and cloud platforms such as AWS, Azure, and GCP.
Strong knowledge of networking fundamentals, including TCP/IP, DNS, HTTP/HTTPS, Active Directory, and related network protocols.
Experience with scripting languages such as Python, PowerShell, or Bash.
Familiarity with APIs and integrations for automating vulnerability management processes.
Strong analytical, troubleshooting, communication, and problem-solving skills.
Ability to assess technical security risks and communicate findings and remediation recommendations to technical teams and business stakeholders.
Roles and Responsibilities
Administer, configure, and maintain the Qualys platform, including VMDR, Policy Compliance, Patch Management, and Asset Inventory modules.
Configure and manage Qualys scanners, scanner appliances, agents, and scheduled vulnerability scans.
Perform vulnerability assessments across servers, endpoints, network devices, cloud environments, and applications.
Analyze vulnerability scan results, validate findings, identify security gaps, and recommend appropriate remediation actions.
Prioritize vulnerabilities based on CVSS scores, exploitability, threat intelligence, asset criticality, and business impact.
Collaborate with infrastructure, application, network, and cloud teams to coordinate and track vulnerability remediation activities.
Develop and maintain dashboards, reports, and key performance metrics to communicate vulnerability status and remediation progress to security leadership and stakeholders.
Monitor compliance with enterprise security policies, industry standards, and regulatory requirements.
Conduct asset discovery activities and maintain accurate, up-to-date asset inventories within the Qualys platform.
Support security audits, risk assessments, compliance reviews, and vulnerability management initiatives.
Automate vulnerability management workflows using APIs, scripting, and integrations with enterprise security and IT management tools.
Troubleshoot scanner configuration issues, scan failures, agent connectivity problems, and other operational challenges.
Optimize scanning configurations, schedules, and performance to improve vulnerability coverage and detection efficiency.
Track remediation progress, identify recurring vulnerabilities, and recommend continuous improvements to vulnerability management processes.
Stay up to date with emerging vulnerabilities, cybersecurity threats, exploitation trends, and new Qualys platform features and capabilities.
Preferred Qualifications
Experience managing vulnerability programs in large enterprise environments.
Familiarity with vulnerability remediation SLAs, exception management, and risk acceptance processes.
Experience integrating Qualys with ticketing systems, SIEM platforms, and IT service management tools.
Understanding of cloud security posture, asset exposure, and vulnerability management across hybrid infrastructure.
Relevant Qualys certifications or other recognized cybersecurity certifications are an advantage
Work Authorization
Applicants must be legally authorized to work in the United States.

Equal Employment Opportunity
Themesoft Inc is an Equal Employment Opportunity employer. We consider qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, disability, veteran status, or any other status protected by applicable federal, state, or local law.

Salary : $55 - $60