Vulnerability Management Engineer, Security Assessment – Qualys VMDR
Employment Information
Report this job
Job expired or something wrong with this job?
Job Description
Vulnerability engineer operating Qualys VMDR, security assessments, and remediation tracking. Supporting Gruve’s enterprise cybersecurity and cloud infrastructure services through global 24x7 operations.
Responsibilities:
- Administer and troubleshoot vulnerability scans using Qualys VMDR or equivalent platforms
- Investigate scan failures, authentication issues, scanner connectivity and asset discovery gaps
- Analyze CVEs, CVSS severity, affected assets and vulnerability trends
- Validate asset coverage and investigate discrepancies in scan results
- Support risk-based prioritization based on severity, exploitability, asset criticality and remediation SLAs
- Investigate recurring findings and potential false positives
- Coordinate technical security assessments and infrastructure control reviews
- Review and validate evidence for access management, patching, configuration compliance, logging and backup controls
- Identify control gaps, missing evidence, policy deviations and compliance issues
- Coordinate with infrastructure and application owners to resolve assessment observations
- Coordinate remediation activities with Server, Network, Database, Cloud and Application teams
- Track vulnerability aging, action owners, remediation deadlines, SLA breaches and exceptions
- Validate remediation through rescans and review updated vulnerability status
- Generate vulnerability, remediation aging, assessment status and compliance reports
- Maintain vulnerability registers, assessment trackers, dashboards and evidence repositories
- Support internal and external audits by coordinating and validating technical evidence
- Troubleshoot complex vulnerability management platform and assessment workflow incidents
- Perform root-cause analysis for recurring scan failures, authentication issues and reporting discrepancies
- Manage incidents and service requests within defined SLAs using approved ITSM workflows
- Follow ITIL Incident, Problem, Change and Request Management processes
- Maintain SOPs, runbooks, knowledge articles and shift handover documentation; provide guidance to L1
- Identify automation opportunities and process improvements, coordinating implementation through approved change procedures
Requirements:
- 3–6 years of experience in cloud infrastructure operations, administration and production support across Microsoft Azure and/or AWS environments
- Hands-on experience with Qualys VMDR or equivalent vulnerability management tools
- Strong understanding of CVEs, CVSS, vulnerability scanning and remediation validation
- Experience with security assessments, technical evidence reviews and control gap identification
- Knowledge of Windows/Linux, networking, databases, cloud and enterprise IT environments
- Experience with ServiceNow or equivalent ITSM tools, reporting and SLA management
- Strong troubleshooting, analytical, documentation and stakeholder coordination skills
- Global 24x7x365 support across APAC, EMEA and NLAM, with rotational shifts and follow-the-sun handovers
- Qualys certification or exposure to Qualys Policy Compliance and related modules preferred
- Knowledge of ISO 27001, SOC 2, CIS Benchmarks or other security frameworks preferred
- Exposure to GRC platforms, audit management and risk exception workflows preferred
- Basic scripting skills in PowerShell, Python or Shell preferred
- Experience with security dashboards, automation and operational process improvement preferred
- Security+, ITIL or relevant information security certifications preferred
Benefits:
- Dynamic environment at a well-funded early-stage startup
- Strong customer and partner networks
- Culture of innovation, collaboration, and continuous learning
- Diverse and inclusive workplace
- Equal opportunity employer
Similar Jobs
Director of Security, Risk
Director leading security governance, compliance, and risk programs at SentiLink, which verifies identities and flags fraud. Owning FedRAMP, SOC 2, PCI DSS, and third-party risk.
Senior Cloud Security Engineer
Senior Cloud Security Engineer owning AWS security for Erbis’s enterprise supply-chain and shipment platform. Leading detection, incident response, identity, compliance, and AI-assisted security operations.
Information Security Consultant
Information Security Consultant delivering GRC engagements, risk assessments and vCISO advisory. Helping Cognisys clients strengthen security programmes and achieve compliance certifications.
Senior Cybersecurity IAM Engineer
Senior IAM Engineer managing identity, access, authentication, and entitlement systems for Louisiana Blue, a health insurer. Designing secure IAM architecture, integrations, and controls.
Product Security Engineer
Product Security Engineer securing Superhuman’s AI productivity platform, products, and AI agents. Building secure-by-default tooling, guardrails, and product security practices.
IT Lead – Security
IT and cybersecurity lead owning systems, support, hardware, and security for Frontline’s remote wildfire-defense technology company. Building IT operations and SOC 2 readiness as its first dedicated IT professional.
Senior Director, Product Security
Senior Director leading application, privacy, device, and research security at 1Password. Building secure access solutions for over 180,000 businesses.
Security Engineer II
Analista de Governança de TI apoiando controles, auditorias e riscos tecnológicos na Stone. Contribuição para a melhoria contínua dos processos de tecnologia da fintech brasileira de pagamentos.
Senior AWS DevOps/Security Engineer – Architect
Senior AWS DevOps/Security Engineer designing, securing, and operating Tieto’s AWS platforms. Automating infrastructure, CI/CD, monitoring, and production operations for modernization and migration programs.
Senior Security Engineer, Product Security
Senior Security Engineer securing Komodo Health’s healthcare data platform, software supply chain, and AI features. Automating product-security testing and remediation across US-based engineering teams.
Senior Digital Security Specialist – Offensive and Defensive Security
Especialista sênior em segurança digital na Evertec, empresa de tecnologia financeira. Executando testes de intrusão e orientando remediações em aplicações, infraestrutura e nuvem.
Senior Instructor, Training – Cloud Security
Cloud security instructor delivering hands-on CNAPP and Falcon Cloud Security training. Developing courses, certification exams, and labs for CrowdStrike customers.
Cloud Azure Security Engineer
Cloud Azure Security Engineer securing Microsoft Azure environments for Monks, a global AI-powered transformation consultancy. Managing Entra ID, compliance controls, vulnerabilities, and cloud security automation.
Staff Product Security Engineer
Staff Product Security Engineer embedding with ServiceTitan engineering portfolios to secure SaaS applications, cloud infrastructure, and AI-enabled features. Driving threat modeling, remediation, paved-road adoption, and portfolio risk reduction.
Senior Information Security Coordinator
Coordenador sênior de segurança da informação no Bernoulli Educação, grupo educacional brasileiro. Gestão de riscos, LGPD, incidentes, vulnerabilidades e equipes.
Incident Response Product Security Engineer II
Incident response engineer securing Esri’s ArcGIS geographic-information software. Investigating vulnerabilities, facilitating red-team exercises, and advancing product security practices.
Security Assessor
Security Assessor evaluating federal information systems against NIST RMF and FedRAMP requirements. Conducting control assessments, risk analysis, ATO support, and compliance documentation remotely.
Staff Engineer, Security
Staff Security Engineer strengthening NextGen Healthcare’s cloud security posture. Automating threat detection, vulnerability mitigation, and AI-enabled security operations across cloud systems.
Security Architect – Zero Trust, Application Access
Security Architect designing Zscaler Zero Trust access for internal business applications. Assessing application exposure, establishing security standards, and guiding cross-functional implementation.
Security Engineer
Security Engineer protecting Allium’s canonical onchain finance data infrastructure, cloud systems, and AI agents. Building detection, response, access, and compliance controls.