: Qualys L2 Engineer / Consultant

Experience: 3–6 years of relevant cybersecurity or vulnerability management experience, including hands-on Qualys administration and client-facing support.

Role overview

We are looking for a Qualys L2 Engineer / Consultant to support vulnerability management operations for clients in India and across global regions. The role requires hands-on Qualys expertise, strong troubleshooting and analytical skills, and the ability to communicate technical findings clearly to both technical teams and client stakeholders.

Key responsibilities

- Administer and support Qualys vulnerability & Configuration management activities across client environments.
- Configure and manage asset discovery, scan schedules, scanner appliances, authentication settings, tags, and dashboards.
- Review scan results, investigate scan failures and authentication issues, and resolve coverage gaps.
- Validate and prioritize vulnerabilities using severity, asset criticality, exposure, and available remediation information.
- Work with infrastructure, cloud, application, and security teams to track remediation and verify fixes through rescanning.
- Investigate false positives and document the rationale for findings, exceptions, and risk acceptance requests.
- Prepare vulnerability reports, operational dashboards, and concise summaries for technical and management audiences.
- Handle L2 support tickets and client escalations within agreed service levels; engage the OEM or internal specialists when needed.
- Lead or participate in client calls, explain findings and remediation recommendations, and provide clear status updates.
- Maintain runbooks, configuration records, and process documentation.




- Coordinate effectively with clients and internal teams across India and global time zones.

Required technical skills

- Hands-on experience administering Qualys VMDR & Configuration management or Qualys Vulnerability Management in an enterprise or managed-services environment.
- Robust understanding of vulnerability scanning, authenticated scans, asset inventory, tagging, reporting, and remediation workflows.
- Ability to troubleshoot scan connectivity, credential failures, scanner performance, and incomplete asset coverage.
- Working knowledge of TCP/IP, DNS, firewalls, Windows and Linux administration, and common enterprise infrastructure.
- Ability to interpret vulnerability findings, CVEs, severity ratings, and vendor remediation guidance.
- Experience producing actionable reports and tracking vulnerabilities through remediation and validation.

Communication and client-facing skills

- Excellent written and spoken English, with the ability to lead discussions with India-based and global clients.
- Ability to explain technical risks and remediation steps clearly to stakeholders with different levels of technical expertise.
- Strong ownership of client queries, follow-ups, escalations, and meeting notes.
- Comfortable coordinating across teams and time zones while maintaining a professional client experience.

Preferred qualifications

- Experience with additional Qualys modules, such as Policy Compliance, Cloud Agent, Patch Management, or Cloud Security.
- Familiarity with ITSM or ticketing platforms and SIEM integrations.
- Experience supporting multiple client environments in an MSSP or consulting setting.
- Relevant Qualys certifications mandatory.

📌 Qualys Consultant (Navi Mumbai)
🏢 Eventus Security
📍 Navi Mumbai