Zensar Technologies
Senior Vulnerability Management Specialist (Qualys VMDR & QGS Expert)
Skills
Job description
Job Title
Senior Vulnerability Management Specialist (Qualys VMDR & QGS Expert)
Location: Bangalore
Role Summary
We are seeking a highly skilled Vulnerability Management (VM) Specialist with deep expertise in Qualys VMDR, Qualys Gateway Service (QGS), enterprise vulnerability remediation programs, executive reporting, and QGS migration projects. The candidate will lead vulnerability management operations across large-scale enterprise environments, drive risk-based remediation initiatives, optimize scanning infrastructure, and provide actionable security insights to management.
Ideal Candidate Profile
8-10 years in Vulnerability Management.
7+ years of hands-on Qualys VMDR administration.
Proven experience in QGS migrations and deployment projects.
Experience managing environments with 20,000+ assets.
Strong stakeholder management and executive reporting skills.
Ability to lead vulnerability review meetings and remediation governance programs.
Key Responsibilities
Vulnerability Management OPS and implementation.
Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
Own the complete vulnerability lifecycle: Discovery
Assessment
Prioritization
Remediation Tracking
Validation
Reporting
Develop risk-based remediation strategies aligned with business priorities.
Review and validate Critical, High, and Zero-Day vulnerabilities.
Drive vulnerability reduction initiatives and SLA compliance programs.
Conduct vulnerability trend analysis and management reviews.
Qualys VMDR Administration
Serve as Subject Matter Expert (SME) for Qualys VMDR.
Design and maintain: Asset Groups
Dynamic Tags
Business Units
Scan Profiles
Option Profiles
Remediation Policies
Manage authenticated scanning for: Windows
Linux
Network Devices
Databases
Optimize scan performance and asset coverage.
Troubleshoot scanning failures and credential issues.
Manage VMDR Dashboards and Reporting Frameworks.
Qualys Gateway Service (QGS) Migration & Management
Primary Focus Area
Lead QGS migration projects from On-Prem to Cloud environments.
Responsibilities
Design migration architecture for Qualys Gateway Services.
Install, configure, upgrade, and maintain QGS infrastructure.
Perform migration planning, testing, deployment, and rollback activities.
Conduct connectivity validation and health checks.
Validate scanner communication between: Qualys Cloud Platform
Internal Assets
Remote Networks
Troubleshoot: Connectivity issues
Certificate issues
Firewall restrictions
Network routing issues
Coordinate with: Network Teams
Cloud Teams
Infrastructure Teams
Develop QGS migration runbooks and operational documentation.
Perform post-migration health checks and stabilization activities.
Develop migration runbooks and operational documentation.
Expected Experience
Multiple QGS deployment and migration projects.
Hybrid cloud environments.
Azure, AWS, OCI, VMware environments.
Proxy and firewall integrations.
Executive Reporting & Metrics
Must Have Expertise
Build Executive Vulnerability Dashboards.
Present cyber risk posture to leadership teams.
Track and report: Total Vulnerabilities
Critical Vulnerabilities
High Vulnerabilities
Remediation Trends
SLA Compliance
Asset Coverage
Scan Coverage
Vulnerability Aging
Risk Reduction Metrics
Reporting Tools
Qualys Reporting
Power BI
Excel Dashboards
ServiceNow Reporting
Sample Reports
Weekly Executive Security Dashboard
Monthly Vulnerability Review
Risk-Based Prioritization Reports
Regulatory Compliance Reports
KPI/KRI Reports
Vulnerability Trending Analysis
Vulnerability Remediation Governance
Coordinate remediation activities with: Windows Teams
Linux Teams
Network Teams
Application Owners
Conduct remediation review meetings.
Monitor SLA adherence.
Define remediation priorities based on: CVSS
EPSS
Exploit Availability
Asset Criticality
Validate fixes through rescanning.
Automation & Integration
Utilize Qualys APIs for automation.
Integrate Qualys with: ServiceNow
Jira
CMDB
SIEM Platforms
Develop scripts using: PowerShell
Python
Automate reporting and remediation tracking.
Required Skills
Vulnerability Management
Vulnerability Lifecycle Management
Risk-Based Vulnerability Management
CVSS v3/v4
Vulnerability Prioritization
Remediation Validation
Executive Reporting
Audit Support
Qualys Expertise
Qualys VMDR
Qualys Gateway Service (QGS)
Asset Management
Policy Compliance
Patch Management Module
Report Templates
Dynamic Tagging
Cloud Agents
Scanner Appliances
VMDR Dashboards
Operating Systems
Windows Server
Linux (RHEL, CentOS, Ubuntu)
Active Directory
DNS
DHCP
Cloud Platforms
Azure
AWS
Oracle Cloud (OCI)
VMware
Hybrid Cloud
Tools
Qualys VMDR
ServiceNow
Power BI
Excel
Splunk / Sentinel
Jira
Preferred Certifications
Qualys VMDR Specialist
Qualys Certified Professional
CISSP
CEH
Security+
Microsoft Azure Security Certifications
Good-to-Have
Armis Asset Intelligence & Exposure Management
Required Armis Experience
Administer and support Armis platform deployments.
Perform enterprise asset discovery and inventory management.
Monitor managed, unmanaged, IoT and OT assets.
Identify vulnerable, rogue, and end-of-life assets.
Correlate asset intelligence with Qualys vulnerability findings.
Leverage Armis for attack surface visibility and cyber asset exposure management.
Track device ownership and remediation accountability.
Create exposure-based risk reports using Armis insights.
Monitor: IoT Devices
Network Infrastructure
Endpoints
Cloud-connected Assets
Armis Integrations
Qualys VMDR
ServiceNow CMDB
Microsoft Sentinel
Splunk
CrowdStrike
Active Directory
Key Responsibilities
Vulnerability Management OPS and implementation.
Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
Own the complete vulnerability lifecycle: Discovery
Assessment
Prioritization
Remediation Tracking
Validation
Reporting
Develop risk-based remediation strategies aligned with business priorities.
Review and validate Critical, High, and Zero-Day vulnerabilities.
Drive vulnerability reduction initiatives and SLA compliance programs.
Conduct vulnerability trend analysis and management reviews.
Qualys VMDR Administration
Serve as Subject Matter Expert (SME) for Qualys VMDR.
Design and maintain: Asset Groups
Dynamic Tags
Business Units
Scan Profiles
Option Profiles
Remediation Policies
Manage authenticated scanning for: Windows
Linux
Network Devices
Databases
Optimize scan performance and asset coverage.
Troubleshoot scanning failures and credential issues.
Manage VMDR Dashboards and Reporting Frameworks.
Qualys Gateway Service (QGS) Migration & Management
Primary Focus Area
Lead QGS migration projects from On-Prem to Cloud environments.
Responsibilities
Design migration architecture for Qualys Gateway Services.
Install, configure, upgrade, and maintain QGS infrastructure.
Perform migration planning, testing, deployment, and rollback activities.
Conduct connectivity validation and health checks.
Validate scanner communication between: Qualys Cloud Platform
Internal Assets
Remote Networks
Troubleshoot: Connectivity issues
Certificate issues
Firewall restrictions
Network routing issues
Coordinate with: Network Teams
Cloud Teams
Infrastructure Teams
Develop QGS migration runbooks and operational documentation.
Perform post-migration health checks and stabilization activities.
Develop migration runbooks and operational documentation.
Expected Experience
Multiple QGS deployment and migration projects.
Hybrid cloud environments.
Azure, AWS, OCI, VMware environments.
Proxy and firewall integrations.
Executive Reporting & Metrics
Must Have Expertise
Build Executive Vulnerability Dashboards.
Present cyber risk posture to leadership teams.
Track and report: Total Vulnerabilities
Critical Vulnerabilities
High Vulnerabilities
Remediation Trends
SLA Compliance
Asset Coverage
Scan Coverage
Vulnerability Aging
Risk Reduction Metrics
Reporting Tools
Qualys Reporting
Power BI
Excel Dashboards
ServiceNow Reporting
Sample Reports
Weekly Executive Security Dashboard
Monthly Vulnerability Review
Risk-Based Prioritization Reports
Regulatory Compliance Reports
KPI/KRI Reports
Vulnerability Trending Analysis
Vulnerability Remediation Governance
Coordinate remediation activities with: Windows Teams
Linux Teams
Network Teams
Application Owners
Conduct remediation review meetings.
Monitor SLA adherence.
Define remediation priorities based on: CVSS
EPSS
Exploit Availability
Asset Criticality
Validate fixes through rescanning.
Automation & Integration
Utilize Qualys APIs for automation.
Integrate Qualys with: ServiceNow
Jira
CMDB
SIEM Platforms
Develop scripts using: PowerShell
Python
Automate reporting and remediation tracking.
Required Skills
Vulnerability Management
Vulnerability Lifecycle Management
Risk-Based Vulnerability Management
CVSS v3/v4
Vulnerability Prioritization
Remediation Validation
Executive Reporting
Audit Support
Qualys Expertise
Qualys VMDR
Qualys Gateway Service (QGS)
Asset Management
Policy Compliance
Patch Management Module
Report Templates
Dynamic Tagging
Cloud Agents
Scanner Appliances
VMDR Dashboards
Operating Systems
Windows Server
Linux (RHEL, CentOS, Ubuntu)
Active Directory
DNS
DHCP
Cloud Platforms
Azure
AWS
Oracle Cloud (OCI)
VMware
Hybrid Cloud
Tools
Qualys VMDR
ServiceNow
Power BI
Excel
Splunk / Sentinel
Jira
Preferred Certifications
Qualys VMDR Specialist
Qualys Certified Professional
CISSP
CEH
Security+
Microsoft Azure Security Certifications
Good-to-Have
Armis Asset Intelligence & Exposure Management
Required Armis Experience
Administer and support Armis platform deployments.
Perform enterprise asset discovery and inventory management.
Monitor managed, unmanaged, IoT and OT assets.
Identify vulnerable, rogue, and end-of-life assets.
Correlate asset intelligence with Qualys vulnerability findings.
Leverage Armis for attack surface visibility and cyber asset exposure management.
Track device ownership and remediation accountability.
Create exposure-based risk reports using Armis insights.
Monitor: IoT Devices
Network Infrastructure
Endpoints
Cloud-connected Assets
Armis Integrations
Qualys VMDR
ServiceNow CMDB
Microsoft Sentinel
Splunk
CrowdStrike
Active Directory