Job description

Vulnerability Management Specialist - Qualys Role Overview

We are seeking an experienced Vulnerability Management Specialist - Qualys to support the organization's cybersecurity and risk management initiatives through the effective management of enterprise vulnerability programs.

This role will be responsible for operating and enhancing the vulnerability management lifecycle, leveraging Qualys to identify, assess, prioritize, report, and remediate security vulnerabilities across infrastructure, cloud, applications, databases, and endpoints. The successful candidate will play a critical role in reducing cyber risk, improving security posture, and ensuring compliance with regulatory and security requirements.

The ideal candidate will possess strong expertise in Qualys Vulnerability Management, Cyber Risk Assessment, Vulnerability Remediation, Security Operations, Infrastructure Security, and Compliance Management, with experience operating within large enterprise or regulated environments.

• Manage the end-to-end vulnerability management lifecycle across enterprise technology environments.
• Configure, administer, and optimize the Qualys platform and related modules.
• Conduct regular vulnerability scans across servers, workstations, databases, network devices, cloud platforms, and applications.
• Analyse vulnerability findings and perform risk-based prioritisation based on business impact and threat exposure.
• Coordinate remediation activities with infrastructure, cloud, application, and security teams.
• Track remediation progress and enforce vulnerability management SLAs.
• Develop and maintain vulnerability dashboards, scorecards, and executive reporting.
• Support continuous monitoring and security posture improvement initiatives.
• Validate remediation efforts through re-scanning and verification activities.
• Monitor emerging vulnerabilities, threat intelligence feeds, and security advisories to assess organizational impact.
• Support security audits, regulatory reviews, and compliance assessments.
• Perform root cause analysis on recurring vulnerabilities and recommend long-term corrective actions.
• Assist with security risk assessments and technology security reviews.
• Drive continuous improvement of vulnerability management processes, controls, and governance frameworks.
• Contribute to cyber resilience and risk reduction initiatives across the enterprise.

• 5+ years of experience in Cybersecurity, Vulnerability Management, Security Operations, or Infrastructure Security.

  
  
  

• Strong expertise in:

  
  
  
  • Vulnerability Management
  • Security Risk Management
  • Security Assessment
  • Cybersecurity Operations
  • Infrastructure Security

• Hands-on experience with:

  
  
  
  • Qualys VMDR (Vulnerability Management, Detection & Response)
  • Qualys Asset Management
  • Qualys Patch Management
  • Qualys Policy Compliance
  • Qualys Cloud Security

• Strong understanding of:

  
  
  
  • CVSS Scoring
  • Vulnerability Prioritisation
  • Security Hardening
  • Threat & Risk Assessment
  • Secure Configuration Management

• Experience managing vulnerabilities across:

  
  
  
  • Windows
  • Linux
  • Unix
  • Databases
  • Network Infrastructure
  • Cloud Platforms

• Knowledge of cloud environments including:

  
  
  
  • Microsoft Azure
  • Amazon Web Services (AWS)
  • Google Cloud Platform (GCP)

• Experience working with vulnerability remediation governance and tracking frameworks.

  
  
  

• Strong analytical, investigative, and problem-solving skills.

  
  
  

• Excellent communication and stakeholder management abilities.

  
  
  

• Experience creating executive-level security reports and metrics.

  
  
  

• Banking, financial services, or highly regulated industry experience.

  
  
  

• Experience integrating Qualys with SIEM, ITSM, and Security Operations platforms.

  
  
  

• Exposure to vulnerability remediation automation and orchestration solutions.

  
  
  

• Experience with:

  
  
  
  • Tenable
  • Rapid7
  • ServiceNow
  • Splunk

• Understanding of penetration testing and security assessment methodologies.

  
  
  

• Knowledge of cloud-native vulnerability management and container security.

  
  
  

• Experience supporting security compliance programs and audit activities.

  
  
  

• Familiarity with DevSecOps and secure software development practices.

  
  
  

• Qualys Certified Specialist Certifications
• Qualys VMDR Certification
• CompTIA Security+
• CEH (Certified Ethical Hacker)
• CISSP
• CISM
• GIAC Certifications
• Microsoft Security Certifications
• AWS Security Certifications

• Bachelor's degree in Cybersecurity, Information Security, Computer Science, Information Technology, Engineering, or a related discipline.
• Relevant cybersecurity and vulnerability management certifications are highly desirable.
• Additional cloud security or security operations certifications would be advantageous.

With over 28 years of experience, we have come to understand that innovation is the only way to provide agile, practical solutions that transform businesses and careers. Our resourcing and smart services help you to realise tomorrow's potential. Discover the amazing things possible when you bring the right people and the right technologies together.

At Halian, we recognise that diversity, equity, and inclusion (DEI) are essential to building high-performing teams for our clients. We are committed to connecting organisations with top talent from all backgrounds, ensuring that every individual feels valued, respected, and empowered to contribute their unique perspectives.

We encourage applications from all qualified candidates, regardless of race, gender, disability, or any other characteristic that makes them unique.

#LI-CC1