About this role
The Qualys Engineering Analyst will own the end‑to‑end vulnerability management lifecycle, partnering with infrastructure, network, firewall, hypervisor, server, and application teams. You will drive scanning, analysis, reporting, and remediation governance while delivering actionable metrics and ensuring alignment with industry frameworks such as SANS, OWASP, and MITRE ATT&CK.
- Bachelor’s degree in Computer Science, Cybersecurity, or related field, or equivalent experience.
- 5–8 years of combined IT and security experience, including 3+ years in vulnerability management.
- Proven expertise with Qualys vulnerability scanning platform.
- Hands‑on experience with additional tools such as Armis, Microsoft Defender for Endpoint/Cloud.
- Advanced Microsoft Excel skills for data analysis and reporting.
- Familiarity with SANS Top 25 controls, OWASP Top 10, and MITRE ATT&CK framework.
- Strong understanding of cloud architectures, services, and associated vulnerabilities.
- Ability to interpret and communicate complex vulnerability data to technical and non‑technical audiences.
- Knowledge of risk assessment methodologies and remediation governance.
- Excellent written and verbal communication skills.