Qualys Engineering Analyst

The Qualys Engineering Analyst will own the end‑to‑end vulnerability management lifecycle, partnering with infrastructure, network, firewall, hypervisor, server, and application teams. You will drive scanning, analysis, reporting, and remediation governance while delivering actionable metrics and ensuring alignment with industry frameworks such as SANS, OWASP, and MITRE ATT&CK.

• Interact regularly with IT, InfoSec managers, engineers, and developers to coordinate vulnerability activities.
• Provide governance and operational support for vulnerability remediation processes.
• Generate and deliver ad‑hoc and scheduled vulnerability metrics reports for key performance indicators.
• Drive remediation initiatives and track progress across multiple support teams.
• Respond to stakeholder inquiries regarding assessment results and remediation actions.
• Collaborate with network, firewall, hypervisor, server, and application teams on identified vulnerabilities.
• Conduct vulnerability scans using Qualys and other tools, ensuring coverage of on‑prem and cloud assets.
• Analyze vulnerability data using advanced Excel techniques to identify trends and risk exposure.
• Maintain alignment with SANS Top 25, OWASP Top 10, and MITRE ATT&CK frameworks.
• Document remediation procedures and contribute to continuous improvement of the vulnerability management program.