Number of Positions:

1Competency:

Qualys, Vulnerability Assessment Level:

Level 1:

About the Company: ACPL

We at ACPL are Cyber Security specialists and help corporates with their complete cycle of setting up the Cyber security platform. Right from selecting the adaptable security tools to the deployment of the same and then providing dedicated cybersecurity services.

Established in 1990, ACPL is the developer of India’s first antivirus software “SmartDog”. We offer our services and solutions by integrating complex technologies offered by the leading IT companies through strategic partnerships. Our solutions and services are majorly focused on the most challenging industry verticals like BFSI, Manufacturing, Telecommunication, Retail, Healthcare, IT/ ITES, Power, Media Education, Distribution and more.

We are $45 million company with PAN India presence with services across ASIA and a branch office in Singapore. We are a team of 250+ highly qualified professionals having certifications like CISSP , CISA , GICH etc.

Apart from winning various Industry awards and recognitions ACPL is 100% RBA Compliant and a certified “Excellent place to work”.

Role Overview

We are looking for an experienced Vulnerability Management Engineer with hands-on expertise in Qualys VMDR, Qualys Policy Compliance (SCA), and Nipper for vulnerability assessment, secure configuration analysis, and network security posture management.

Key Responsibilities





- Perform vulnerability assessments across network devices, servers, endpoints, and cloud workloads using Qualys VMDR.

- Conduct Security Configuration Assessments (SCA) and OS hardening reviews against CIS, NIST, STIG, and ISO 27001 standards.

- Analyze firewall, router, and switch configurations using Nipper to identify misconfigurations and security gaps.

- Assess network segmentation, VLANs, ACLs, and firewall rules to identify excessive access and lateral movement risks.

- Correlate vulnerabilities and configuration gaps to prioritize remediation based on risk.

- Coordinate with network, infrastructure, endpoint, and cloud teams to drive remediation and validate fixes through rescans.

- Maintain asset inventory, scan coverage, compliance reports, and vulnerability remediation SLAs.

- Support audits and compliance activities with technical evidence and reporting.

Technical Skills Required

- Strong hands-on experience with Qualys VMDR, Qualys Policy Compliance (SCA), and Nipper.

- Knowledge of Windows/Linux hardening, network security, endpoint security, and cloud security (AWS/Azure/GCP).

- Experience with authenticated scanning, credential management, and Qualys Cloud Agent deployment and troubleshooting.

- Understanding of CIS Benchmarks, STIGs, NIST, ISO 27001, CVSS, and OWASP Top 10.

- Experience auditing firewall, router, and switch configurations.

Designation:

Solution Engineer

📌 Qualys (Mumbai)
🏢 the Company: ACPL
📍 Mumbai