Vulnerability Management Engineer

Job Summary
We are seeking a Senior Enterprise Vulnerability Management Engineer to lead the design, implementation, and governance of enterprise-wide vulnerability management programs. The candidate must have extensive hands-on expertise with Qualys, Linux patching, cloud security, automation, and large-scale remediation projects.
Responsibilities
Lead enterprise vulnerability management and patching initiatives.
Architect and implement Qualys solutions across on-premise and cloud environments.
Define remediation processes, security standards, and patching strategies.
Drive vulnerability prioritization for critical and zero-day threats.
Lead Qualys integrations with AWS, Azure, VMware, and enterprise platforms.
Mentor security engineers and provide technical leadership.
Develop automation frameworks using PowerShell and Bash.
Design dashboards, reporting, and compliance processes.
Act as the escalation point for complex vulnerability and patch management issues.
Required Skills
5-7 years of experience in Enterprise Vulnerability Management, Security Operations, and Infrastructure Security.
Extensive hands-on expertise with Qualys VMDR, Patch Management (PM), CSAM, EASM, Threat Protection, and Risk Analysis modules.
Proven experience designing and leading large-scale Vulnerability Management and Patch Management programs in enterprise environments.
Strong expertise in Qualys platform administration, architecture design, agent deployment strategy, and platform governance.
Deep experience in vulnerability assessment, risk scoring, remediation planning, and management of critical and zero-day vulnerabilities.
Extensive hands-on experience in Linux Administration and Linux Patching across large enterprise environments (Mandatory).
Strong experience managing hybrid infrastructure environments across On-Premises, AWS, and Azure platforms.
Expertise in integrating Qualys with cloud platforms, datacenters, and enterprise security tools.
Strong knowledge of VMware/vCenter Administration, server infrastructure, and asset discovery processes.
Experience establishing patch management standards, governance frameworks, remediation policies, and compliance controls.
Ability to lead enterprise-wide patching and vulnerability remediation initiatives across thousands of assets.
Hands-on experience developing automation solutions using PowerShell and Bash scripting.
Experience implementing Qualys Cloud Agents and maintaining enterprise-wide compliance requirements.
Ability to lead technical discussions, mentor engineering teams, and act as an escalation point for complex security issues.
Experience creating operational processes, SOPs, governance models, dashboards, and executive reporting.
Strong understanding of cloud security, infrastructure security, risk management, and vulnerability governance.
Experience participating in major incident response activities, Code Red vulnerability management, and security remediation programs.

Work arrangement
Yes