Vulnerability Management Specialist
Job Description: Vulnerability Management
Role Overview
We are seeking a highly skilled Vulnerability Management Specialist responsible for driving end-to-end vulnerability lifecycle management, patch compliance, and security posture optimization. The role requires strong expertise in Qualys, remediation governance, and coordination with cross-functional teams to ensure proactive risk mitigation aligned with enterprise security standards.
Key Responsibilities
1. Vulnerability Management & Scanning
- Manage Qualys agent deployment and lifecycle in collaboration with the IT Asset Management (ITAM) team
- Conduct and govern scheduled vulnerability scans:
- Weekly internal scans
- Monthly external scans
- Ensure scan coverage, accuracy, and alignment with organizational policies
2. Remediation Governance & Execution
- Drive wave-based remediation pipeline, including:
- Planning and prioritization
- Validation in test environments
- Defined acceptance criteria before production rollout
- Lead criticality-based remediation strategy:
- Prioritize Critical → High → Medium vulnerabilities
- Conduct post-remediation validation through Qualys re-scanning
3. Risk & Exception Management
- Manage exceptions and compensating controls with proper documentation and approvals
- Coordinate risk acceptance processes with stakeholders and security leadership
- Ensure audit readiness and compliance with internal and regulatory standards
4. Patch & Compliance Monitoring
- Track and enforce patch compliance across systems
- Publish monthly security posture and compliance reports to the CISO office
- Identify trends, gaps, and improvement areas in patching and vulnerability closure
5. System Hardening & Security Improvements
- Drive hardening initiatives for system images and configurations
- Support manual remediation and configuration-fix workflows where automation is not feasible
- Collaborate with engineering teams to institutionalize secure baselines
6. Segmentation & Security Posture Management
- Implement and manage asset segmentation (Red / Yellow / Green classification)
- Enable lab manager and environment-level security controls
- Establish and maintain audit cadence for continuous improvement
Required Skills & Qualifications
- Strong hands-on experience with Qualys Vulnerability Management platform
- Deep understanding of vulnerability lifecycle management and remediation frameworks
- Experience with patch management, OS hardening, and security configurations
- Knowledge of risk management, exception handling, and compliance reporting
- Familiarity with enterprise IT infrastructure (servers, networks, endpoints)
Preferred Qualifications
- Certifications such as CISSP, CEH, CompTIA Security+, or equivalent
- Experience working with CISO office or security governance teams
- Exposure to audit frameworks (ISO 27001, NIST, CIS benchmarks)
Key Competencies
- Strong analytical and problem-solving ability
- Stakeholder management and cross-functional coordination
- Structured and process-oriented mindset
- Ability to drive execution under tight timelines
Key Responsibilities
1. Vulnerability Management & Scanning
- Manage Qualys agent deployment and lifecycle in collaboration with the IT Asset Management (ITAM) team
- Conduct and govern scheduled vulnerability scans:
- Weekly internal scans
- Monthly external scans
- Ensure scan coverage, accuracy, and alignment with organizational policies
2. Remediation Governance & Execution
- Drive wave-based remediation pipeline, including:
- Planning and prioritization
- Validation in test environments
- Defined acceptance criteria before production rollout
- Lead criticality-based remediation strategy:
- Prioritize Critical → High → Medium vulnerabilities
- Conduct post-remediation validation through Qualys re-scanning
3. Risk & Exception Management
- Manage exceptions and compensating controls with proper documentation and approvals
- Coordinate risk acceptance processes with stakeholders and security leadership
- Ensure audit readiness and compliance with internal and regulatory standards
4. Patch & Compliance Monitoring
- Track and enforce patch compliance across systems
- Publish monthly security posture and compliance reports to the CISO office
- Identify trends, gaps, and improvement areas in patching and vulnerability closure
5. System Hardening & Security Improvements
- Drive hardening initiatives for system images and configurations
- Support manual remediation and configuration-fix workflows where automation is not feasible
- Collaborate with engineering teams to institutionalize secure baselines
6. Segmentation & Security Posture Management
- Implement and manage asset segmentation (Red / Yellow / Green classification)
- Enable lab manager and environment-level security controls
- Establish and maintain audit cadence for continuous improvement
Required Skills & Qualifications
- Strong hands-on experience with Qualys Vulnerability Management platform
- Deep understanding of vulnerability lifecycle management and remediation frameworks
- Experience with patch management, OS hardening, and security configurations