Vulnerability Management Engineer

Job Summary

We are seeking a Senior Enterprise Vulnerability Management Engineer to lead the design, implementation, and governance of enterprise-wide vulnerability management programs. The candidate must have extensive hands-on expertise with Qualys, Linux patching, cloud security, automation, and large-scale remediation projects.

Responsibilities

• Lead enterprise vulnerability management and patching initiatives.
• Architect and implement Qualys solutions across on-premise and cloud environments.
• Define remediation processes, security standards, and patching strategies.
• Drive vulnerability prioritization for critical and zero-day threats.
• Lead Qualys integrations with AWS, Azure, VMware, and enterprise platforms.
• Mentor security engineers and provide technical leadership.
• Develop automation frameworks using PowerShell and Bash.
• Design dashboards, reporting, and compliance processes.
• Act as the escalation point for complex vulnerability and patch management issues.

Required Skills

• 5-7 years of experience in Enterprise Vulnerability Management, Security Operations, and Infrastructure Security.
• Extensive hands-on expertise with Qualys VMDR, Patch Management (PM), CSAM, EASM, Threat Protection, and Risk Analysis modules.
• Proven experience designing and leading large-scale Vulnerability Management and Patch Management programs in enterprise environments.
• Strong expertise in Qualys platform administration, architecture design, agent deployment strategy, and platform governance.
• Deep experience in vulnerability assessment, risk scoring, remediation planning, and management of critical and zero-day vulnerabilities.
• Extensive hands-on experience in Linux Administration and Linux Patching across large enterprise environments (Mandatory).
• Strong experience managing hybrid infrastructure environments across On-Premises, AWS, and Azure platforms.
• Expertise in integrating Qualys with cloud platforms, datacenters, and enterprise security tools.
• Strong knowledge of VMware/vCenter Administration, server infrastructure, and asset discovery processes.
• Experience establishing patch management standards, governance frameworks, remediation policies, and compliance controls.
• Ability to lead enterprise-wide patching and vulnerability remediation initiatives across thousands of assets.
• Hands-on experience developing automation solutions using PowerShell and Bash scripting.
• Experience implementing Qualys Cloud Agents and maintaining enterprise-wide compliance requirements.
• Ability to lead technical discussions, mentor engineering teams, and act as an escalation point for complex security issues.
• Experience creating operational processes, SOPs, governance models, dashboards, and executive reporting.
• Strong understanding of cloud security, infrastructure security, risk management, and vulnerability governance.
• Experience participating in major incident response activities, Code Red vulnerability management, and security remediation programs.