CYBER SECURITY ANALYST L4

Job Description

Job Description: Qualys Platform Engineer Core Responsibilities

• Architecture & Deployment Management:

o Design, deploy, and manage Qualys infrastructure, including Virtual Scanner Appliances (vSAs) across multi-cloud (AWS, Azure, GCP) and on-premises environments.

o Architect, test, and deploy the Qualys Cloud Agent across Enterprise Networks (Windows, Linux, macOS) ensuring zero business disruption.

o Optimize scanning schedules, asset tagging, and network discovery rules to maintain an accurate, real-time asset inventory. • Integration & Automation:

o Build and maintain custom scripts and automation workflows using the Qualys API to automate scan scheduling, asset tagging, and report generation.

o Develop robust data pipelines to ingest Qualys vulnerability data into corporate SIEMs (Splunk, Sentinel), ticketing platforms (ServiceNow VR), and CMDBs.

o Embed automated vulnerability scanning directly into DevOps CI/CD pipelines (Jenkins, GitLab, GitHub Actions) to achieve "shift-left" security.

• Platform Health, Scaling & Support: o Monitor the health, connectivity, and capacity of all Qualys scanner appliances and cloud agents globally.

o Act as the SME engineering point of contact for troubleshooting Qualys platform issues, authentication failures, and scanning bottlenecks.

Required Qualifications & Technical Skills

• Education & Experience:

o BS in Computer Science, Cyber Security, Information Technology, or equivalent practical experience.

o 4+ years of dedicated experience managing, configuring, and engineering the Qualys Guard / Qualys Cloud Platform at an enterprise scale.

• Qualys Suite Mastery:

o Deep technical expertise in core Qualys modules: VMDR (Vulnerability Management, Detection, and Response), CAR Module, PC (Policy Compliance), WAS (Web Application Scanning), CAR and AssetView/Global ITAM.

o Strong understanding of authenticated vs. unauthenticated scanning, scanning engine behavior, and credential management.

• Automation & Scripting:

o Proficient in scripting with Python, PowerShell, or Bash to interact directly with the Qualys API (REST/XML).

• Systems & Cloud Infrastructure:

o Strong foundational knowledge of Linux/Unix and Windows operating systems.

o Solid understanding of enterprise networking concepts (firewalls, routing, NAT, load balancing) necessary to debug scanning obstacles.

o Experience supporting cloud environments (AWS, Azure, and GCP). Preferred Qualifications

• Certified Qualys Specialist (e.g., Vulnerability Management, Cloud Agent, or API certifications).

• Proven experience building the Qualys Connector

• Familiarity with container security scanning (Docker, Kubernetes) via Qualys Container Security.

͏

Areas of responsibility

Monitoring and Incident Detection-Analyse attack trends and correlate logs across systems to identify advance threats. Enhance monitoring processes and implement improvements for faster detection, to ensure compliance with security frameworks and regulatory standards.

Incident Handling and Analysis-Perform root cause analysis, create incident response plans and implement disaster recovery measures to minimize business disruption

Threat Assessment and Analytics-Undertake forensic analysis using advanced analytics tools and implement mitigation measures to align with compliance requirements.

Stakeholder Coordination and Audit Assistance-"Liaise with cross functional teams, external vendors and auditors to ensure compliance with security frameworks.

Maintain audit documentation and ensure its accuracy while implementing processes that support audit readiness and continuous compliance."

Training and Awareness-Assist in creating and delivering cybersecurity awareness sessions, including guidance on phishing and malicious emails.

͏

͏

͏