Cyber Security Engineer

We are seeking a highly skilled Qualys Security Engineer to own and mature our vulnerability management program. This role will lead the deployment, configuration, and ongoing administration of the Qualys platform while building actionable reporting and executive-level dashboards. The ideal candidate is both technically hands-on and able to translate vulnerability data into clear insights that drive remediation and risk reduction.Key ResponsibilitiesQualys Platform OwnershipDeploy, configure, and maintain Qualys agents, scanners, and connectors across diverse environments (cloud, on-prem, endpoints, applications).Tune and optimize scan policies, authentication mechanisms, and schedules for performance and accuracy.Vulnerability & Compliance ManagementAnalyze scan results, validate findings, and prioritize remediation based on risk and business impact.Collaborate with IT, DevOps, and application teams to drive timely remediation of vulnerabilities.Conduct compliance assessments using Qualys modules (Policy Compliance, CIS Benchmarks, PCI, ISO, NIST frameworks).Reporting & DashboardsBuild and maintain real-time dashboards for security teams, IT operations, and executive leadership.Develop tailored reporting for technical staff, risk managers, and compliance auditors.Automate report generation and distribution to stakeholders.Automation & IntegrationLeverage Qualys APIs and scripting (Python, PowerShell, Bash) to integrate vulnerability data into SIEMs, ticketing systems, and workflow tools.Automate asset discovery, vulnerability validation, and remediation tracking.Program DevelopmentReduce false positives through continuous tuning and testing.Maintain accurate asset inventories and vulnerability baselines.Stay current on emerging threats, CVEs, and vulnerability management best practices.Qualifications4–6 years of experience in vulnerability management, with hands-on Qualys administration required.Strong understanding of operating system security (Windows, Linux, Unix), networking, and application security.Proficiency in scripting and automation (Python, PowerShell, Bash).Experience designing dashboards and executive reporting in Qualys or integrated BI tools.Familiarity with compliance and security frameworks (NIST 800-53, CIS Controls, ISO 27001, PCI DSS).Strong communication skills — able to translate technical risk into business impact.Bachelor’s degree in Information Security, Computer Science, or related field; relevant certifications (Qualys, CISSP, CEH, Security+) a plus.