Job Title

Senior Vulnerability Management Specialist (Qualys VMDR & QGS Expert)

Location: Bangalore

Role Summary

We are seeking a highly skilled Vulnerability Management (VM) Specialist with deep expertise in Qualys VMDR, Qualys Gateway Service (QGS), enterprise vulnerability remediation programs, executive reporting, and QGS migration projects. The candidate will lead vulnerability management operations across large-scale enterprise environments, drive risk-based remediation initiatives, optimize scanning infrastructure, and provide actionable security insights to management.

Ideal Candidate Profile

8-10 years in Vulnerability Management.
7+ years of hands-on Qualys VMDR administration.
Proven experience in QGS migrations and deployment projects.
Experience managing environments with 20,000+ assets.
Strong stakeholder management and executive reporting skills.
Ability to lead vulnerability review meetings and remediation governance programs.

Key Responsibilities

Vulnerability Management OPS and implementation.

Lead enterprise-wide Vulnerability Management program using Qualys VMDR.

Reporting

Develop risk-based remediation strategies aligned with business priorities.
Review and validate Critical, High, and Zero-Day vulnerabilities.
Drive vulnerability reduction initiatives and SLA compliance programs.
Conduct vulnerability trend analysis and management reviews.

Qualys VMDR Administration

Serve as Subject Matter Expert (SME) for Qualys VMDR.

Databases

Optimize scan performance and asset coverage.
Troubleshoot scanning failures and credential issues.
Manage VMDR Dashboards and Reporting Frameworks.
Qualys Gateway Service (QGS) Migration & Management

Primary Focus Area

Lead QGS migration projects from On-Prem to Cloud environments.

Responsibilities

Design migration architecture for Qualys Gateway Services.
Install, configure, upgrade, and maintain QGS infrastructure.
Perform migration planning, testing, deployment, and rollback activities.
Conduct connectivity validation and health checks.

Troubleshoot

Connectivity issues
Certificate issues
Firewall restrictions
Network routing issues

Infrastructure Teams

Develop QGS migration runbooks and operational documentation.
Perform post-migration health checks and stabilization activities.
Develop migration runbooks and operational documentation.

Expected Experience

Multiple QGS deployment and migration projects.
Hybrid cloud environments.
Azure, AWS, OCI, VMware environments.
Proxy and firewall integrations.

Must Have Expertise

Build Executive Vulnerability Dashboards.

Present cyber risk posture to leadership teams.

Network Teams

Application Owners

Conduct remediation review meetings.

Monitor SLA adherence.

Asset Criticality

Validate fixes through rescanning.

Automation & Integration

Utilize Qualys APIs for automation.

Python

Automate reporting and remediation tracking.

Risk-Based Vulnerability Management

CVSS v3/v4

Qualys VMDR

ServiceNow

Power BI

Jira

Required Armis Experience

Administer and support Armis platform deployments.
Perform enterprise asset discovery and inventory management.
Monitor managed, unmanaged, IoT and OT assets.
Identify vulnerable, rogue, and end-of-life assets.
Correlate asset intelligence with Qualys vulnerability findings.
Leverage Armis for attack surface visibility and cyber asset exposure management.
Track device ownership and remediation accountability.
Create exposure-based risk reports using Armis insights.

Qualys VMDR

Active Directory

Key Responsibilities

Vulnerability Management OPS and implementation.

Lead enterprise-wide Vulnerability Management program using Qualys VMDR.

Own the complete vulnerability lifecycle

Discovery

Assessment

Prioritization

Remediation Tracking

Validation

Reporting

Develop risk-based remediation strategies aligned with business priorities.
Review and validate Critical, High, and Zero-Day vulnerabilities.
Drive vulnerability reduction initiatives and SLA compliance programs.
Conduct vulnerability trend analysis and management reviews.

Qualys VMDR Administration

Serve as Subject Matter Expert (SME) for Qualys VMDR.

Design and maintain

Asset Groups

Dynamic Tags

Business Units

Scan Profiles

Option Profiles

Remediation Policies

Manage authenticated scanning for

Windows

Linux

Network Devices

Databases

Optimize scan performance and asset coverage.
Troubleshoot scanning failures and credential issues.
Manage VMDR Dashboards and Reporting Frameworks.
Qualys Gateway Service (QGS) Migration & Management

Primary Focus Area

Lead QGS migration projects from On-Prem to Cloud environments.

Responsibilities

Design migration architecture for Qualys Gateway Services.
Install, configure, upgrade, and maintain QGS infrastructure.
Perform migration planning, testing, deployment, and rollback activities.
Conduct connectivity validation and health checks.

Validate scanner communication between

Qualys Cloud Platform

Internal Assets

Remote Networks

Troubleshoot

Connectivity issues
Certificate issues
Firewall restrictions
Network routing issues

Coordinate with

Network Teams

Cloud Teams

Infrastructure Teams

Develop QGS migration runbooks and operational documentation.
Perform post-migration health checks and stabilization activities.
Develop migration runbooks and operational documentation.

Expected Experience

Multiple QGS deployment and migration projects.
Hybrid cloud environments.
Azure, AWS, OCI, VMware environments.
Proxy and firewall integrations.

Executive Reporting & Metrics

Must Have Expertise

Build Executive Vulnerability Dashboards.

Present cyber risk posture to leadership teams.

Track and report

Total Vulnerabilities

Critical Vulnerabilities

High Vulnerabilities

Remediation Trends

SLA Compliance

Asset Coverage

Scan Coverage

Vulnerability Aging

Risk Reduction Metrics

Reporting Tools

Qualys Reporting

Power BI

Excel Dashboards

ServiceNow Reporting

Sample Reports

Weekly Executive Security Dashboard

Monthly Vulnerability Review

Risk-Based Prioritization Reports

Regulatory Compliance Reports

KPI/KRI Reports

Vulnerability Trending Analysis

Vulnerability Remediation Governance

Coordinate remediation activities with

Windows Teams

Linux Teams

Network Teams

Application Owners

Conduct remediation review meetings.

Monitor SLA adherence.

Define remediation priorities based on

CVSS

EPSS

Exploit Availability

Asset Criticality

Validate fixes through rescanning.

Automation & Integration

Utilize Qualys APIs for automation.

Integrate Qualys with

ServiceNow

Jira

CMDB

SIEM Platforms

Develop scripts using

PowerShell

Python

Automate reporting and remediation tracking.

Required Skills

Vulnerability Management

Vulnerability Lifecycle Management

Risk-Based Vulnerability Management

CVSS v3/v4

Vulnerability Prioritization

Remediation Validation

Executive Reporting

Audit Support

Qualys Expertise

Qualys VMDR

Qualys Gateway Service (QGS)

Asset Management

Policy Compliance

Patch Management Module

Report Templates

Dynamic Tagging

Cloud Agents

Scanner Appliances

VMDR Dashboards

Operating Systems

Windows Server

Linux (RHEL, CentOS, Ubuntu)

Active Directory

DNS

DHCP

Cloud Platforms

Azure

AWS

Oracle Cloud (OCI)

VMware

Hybrid Cloud

Tools

Qualys VMDR

ServiceNow

Power BI

Excel

Splunk / Sentinel

Jira

Preferred Certifications

Qualys VMDR Specialist

Qualys Certified Professional

CISSP

CEH

Security+

Microsoft Azure Security Certifications

Good-to-Have

Armis Asset Intelligence & Exposure Management

Required Armis Experience

Administer and support Armis platform deployments.
Perform enterprise asset discovery and inventory management.
Monitor managed, unmanaged, IoT and OT assets.
Identify vulnerable, rogue, and end-of-life assets.
Correlate asset intelligence with Qualys vulnerability findings.
Leverage Armis for attack surface visibility and cyber asset exposure management.
Track device ownership and remediation accountability.
Create exposure-based risk reports using Armis insights.