Technical Lead - Qualys SME (Qualys Subject Matter Expert)

Job description

Role: Qualys SME Experience: 7-10 Yrs Share your updated CV to: dhanunjaya.p.m@happiestminds.com Note: Looking for Immediate Joiners (0-15 Days) Strong Communication Skills Required Skills: (Mandatory) • Qualys VMDR • Policy Compliance • Asset Management • WAS Job Description: Role Overview • We are looking for a hands-on Vulnerability Management & Security Posture Engineer with strong experience in Qualys VMDR, Policy Compliance (PC), and Security Configuration Assessment (SCA). The role involves end-to-end ownership of asset discovery, scanning, vulnerability analysis, compliance posture evaluation, and remediation lifecycle management with automation. Key Responsibilities 1. Asset Discovery & Scan Management • Perform asset discovery using agent-based and network scanning methods • Configure and manage scan profiles (authenticated scans, port ranges, schedules) • Execute and monitor scans across infrastructure, cloud, and endpoints 2. Vulnerability & Posture Assessment • Analyze vulnerabilities and misconfigurations (VMDR + Policy Compliance) • Prioritize findings based on CVSS, exploitability, and business impact • Evaluate systems against CIS benchmarks and security baselines 3. Remediation & Automation • Integrate with ITSM tools (e.g., ServiceNow) for ticketing and tracking • Drive remediation lifecycle: open in progress validated closed • Implement auto-remediation using Qualys CAR / QFlow • Manage exceptions, risk acceptance, and compensating controls 4. Reporting & Stakeholder Communication • Generate technical, compliance, and executive reports • Build dashboards for vulnerability trends and compliance posture • Provide remediation guidance and SLA tracking Must-Have Skills • Strong hands-on experience with Qualys VMDR, Policy Compliance (PC), SCA • Good understanding of CIS Benchmarks, CVSS, vulnerability lifecycle • Experience with scan configuration, asset tagging, and prioritization • Familiarity with ITSM integrations (ServiceNow preferred) • Knowledge of cloud security posture (AWS/Azure/GCP) is a plus • Scripting/automation exposure (Python/Shell) preferred Good to Have • Experience with automation workflows (QFlow / SOAR tools) • Understanding of frameworks: ISO 27001, NIST, CIS • Exposure to compliance reporting and audit support Key Deliverables • Asset Inventory & Scan Coverage Reports • Vulnerability Prioritization Matrix • Compliance/Posture Assessment Reports • Remediation Tracker & Auto-remediation Logs • Executive Security Scorecards Preferred candidate profile • Strong ownership mindset with attention to detail • Ability to work with cross-functional teams (Infra, Cloud, App teams) • Proactive approach to risk reduction and automation