Description
Vulnerability Management / Security Specialist:
· Qualys VMDR Administration: Administer and maintain Qualys , including scan configurations, Cloud Agents, Scanner Appliances, asset inventory, tagging, and platform governance.
· Vulnerability Scanning & Coverage: Configure and monitor authenticated vulnerability scans across approximately 650 servers and the wider enterprise environment, addressing scanning, authentication, and coverage gaps.
· Vulnerability Assessment & Prioritization: Analyze Qualys findings, including QIDs and severity, and prioritize vulnerabilities based on risk, exploitability, asset criticality, exposure, and business impact.
· Remediation & Patch Coordination: Work with infrastructure, server, application, and security teams to coordinate patching and remediation of identified vulnerabilities.
· Vulnerability Tracking & SLA Management: Track findings through closure, monitoring remediation progress, vulnerability aging, overdue items, SLA breaches, exceptions, and residual risks.
· Remediation Validation: Perform or coordinate Qualys rescans to validate remediation and confirm successful vulnerability closure.
· Asset & Agent Management: Maintain accurate asset visibility and ownership while monitoring Qualys Cloud Agent health, connectivity, coverage, and unmanaged or inactive assets.
· Reporting & Governance: Develop Qualys dashboards, vulnerability metrics, aging reports, remediation status reports,
and risk summaries for management and governance reviews.
· Exception, Audit & Compliance Management: Manage false positives, risk exceptions, and compensating controls, and provide vulnerability evidence for audits and compliance reviews.
· Security Integration & Continuous Improvement: Correlate relevant Microsoft Defender findings with Qualys results and continuously improve scanning coverage, reporting, remediation workflows, automation, and overall vulnerability-management effectiveness.
Environment / Scope
· Tools: Qualys, Microsoft Defender
· Setting: Approximately 15,000 users and 650 servers
· Primary Focus: Vulnerability governance, patch management, remediation tracking, risk reduction, reporting, and coordination with application owners.
Enable Skills-Based Hiring No ECMS REQ IDAdditional Details
- ECMS REQ ID : 582141
- Project Location 1 : Pan India
- Project Location 2 : (No Value)
- Project Location 3 : (No Value)
- Project Location 4 : (No Value)
- Delivery SPOC :
[email protected]
- Relevant Experience : 8-10 years
- Mandatory skills : Qualys
- Desired skills : patch management, remediation tracking
- Domain (Industry) : Cyber-Security
- BGC (Before onboarding / After onboarding) : PreOB
- Total Experience (Ex. 5-7 Years) : 8-10 years
- BGC Details : NA
- BGC Vendor : NA
- Mode of Interview : Face to Face
- WFO / WFH / Hybrid : Hybrid
- Please enter shift timings : 8*5 CET
- Shift Timings : Others
📌 ECMSRQ#582141_CYBERSEC_Vulnerability Management_india (Bengaluru)
🏢 Trigent Software
📍 Bengaluru