Senior Qualys Administrator - Vulnerability Management
Summary
Administers Qualys VMDR vulnerability management across AWS/Azure/GCP, on-prem servers, endpoints, and network devices — managing scanners, cloud agents, TruRisk dashboards, and remediation SLAs — while building Python automations and AI-driven workflows integrated with Splunk and ServiceNow, and supporting OCC/FFIEC audit reporting.
Salary: ₱70,000 – ₱100,000 per month
Key Responsibilities
Manage and maintain Qualys VMDR, including scanners, scan policies, asset tagging, exclusions, and scan schedules across cloud and on-premises environments.
Ensure proper vulnerability scanning coverage across AWS, Azure, GCP, servers, endpoints, and network devices.
Deploy, monitor, and maintain Qualys Cloud Agents across Windows, macOS, and Linux devices.
Review vulnerability scan results, prioritize risks, and coordinate remediation with engineering and IT teams based on agreed SLAs.
Create and maintain Qualys TruRisk dashboards and reports for security, risk, compliance, and executive teams.
Integrate Qualys with tools such as Splunk and ServiceNow to automate vulnerability tracking, reporting, and ticket creation.
Manage false positives and vulnerability exceptions, ensuring proper documentation and business justification.
Support OCC and FFIEC audits by providing scan evidence, remediation reports, and security control documentation.
Automation and AI Responsibilities
Develop Python scripts to automate Qualys administration, including asset tagging, scan scheduling, asset reconciliation, agent cleanup, and reporting.
Integrate Qualys APIs with AI tools to support vulnerability analysis, risk prioritization, and automated ticket escalation.
Develop AI agents that analyze scan results, enrich findings with threat intelligence, and automatically route remediation tickets.
Identify and automate repetitive manual tasks to improve efficiency and reduce operational workload.
Collaborate with Application Security and Zero Trust teams to align vulnerability management with overall security initiatives.
Qualifications
At least 4 years of hands-on Qualys administration experience in an enterprise environment with 2,000 or more assets.
Strong knowledge of Qualys VMDR, vulnerability scanning, scanner management, scan policy configuration, and TruRisk scoring.
Experience using Qualys APIs and developing automation scripts, preferably with Python.
Knowledge of vulnerability prioritization frameworks such as CVSS, EPSS, and CISA KEV.
Experience integrating Qualys with tools such as ServiceNow, Splunk, or Jira.
Familiarity with cloud asset discovery across AWS, Azure, or GCP.
Interest in AI-assisted automation, including prompt engineering, API integrations, and AI-driven security workflows.