Senior Vulnerability Management Specialist (Qualys VMDR & QGS Expert)

Job Description

Job Title

Senior Vulnerability Management Specialist (Qualys VMDR & QGS Expert)

Location: Bangalore

Role Summary

We are seeking a highly skilled Vulnerability Management (VM) Specialist with deep expertise in Qualys VMDR, Qualys Gateway Service (QGS), enterprise vulnerability remediation programs, executive reporting, and QGS migration projects. The candidate will lead vulnerability management operations across large-scale enterprise environments, drive risk-based remediation initiatives, optimize scanning infrastructure, and provide actionable security insights to management.

Ideal Candidate Profile

• 8-10 years in Vulnerability Management.
• 7+ years of hands-on Qualys VMDR administration.
• Proven experience in QGS migrations and deployment projects.
• Experience managing environments with 20,000+ assets.
• Strong stakeholder management and executive reporting skills.
• Ability to lead vulnerability review meetings and remediation governance programs.
  
  

Key Responsibilities

Vulnerability Management OPS and implementation.

• Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
• Own the complete vulnerability lifecycle:
• Discovery
• Assessment
• Prioritization
• Remediation Tracking
• Validation
• Reporting
• Develop risk-based remediation strategies aligned with business priorities.
• Review and validate Critical, High, and Zero-Day vulnerabilities.
• Drive vulnerability reduction initiatives and SLA compliance programs.
• Conduct vulnerability trend analysis and management reviews.
  

Qualys VMDR Administration

• Serve as Subject Matter Expert (SME) for Qualys VMDR.
• Design and maintain:
• Asset Groups
• Dynamic Tags
• Business Units
• Scan Profiles
• Option Profiles
• Remediation Policies
• Manage authenticated scanning for:
• Windows
• Linux
• Network Devices
• Databases
• Optimize scan performance and asset coverage.
• Troubleshoot scanning failures and credential issues.
• Manage VMDR Dashboards and Reporting Frameworks.
  

Qualys Gateway Service (QGS) Migration & Management

Primary Focus Area

• Lead QGS migration projects from On-Prem to Cloud environments.
  
  

Responsibilities

• Design migration architecture for Qualys Gateway Services.
• Install, configure, upgrade, and maintain QGS infrastructure.
• Perform migration planning, testing, deployment, and rollback activities.
• Conduct connectivity validation and health checks.
• Validate scanner communication between:
• Qualys Cloud Platform
• Internal Assets
• Remote Networks
• Troubleshoot:
• Connectivity issues
• Certificate issues
• Firewall restrictions
• Network routing issues
• Coordinate with:
• Network Teams
• Cloud Teams
• Infrastructure Teams
• Develop QGS migration runbooks and operational documentation.
• Perform post-migration health checks and stabilization activities.
• Develop migration runbooks and operational documentation.
  

Expected Experience

• Multiple QGS deployment and migration projects.
• Hybrid cloud environments.
• Azure, AWS, OCI, VMware environments.
• Proxy and firewall integrations.
  
  

Executive Reporting & Metrics

Must Have Expertise

• Build Executive Vulnerability Dashboards.
• Present cyber risk posture to leadership teams.
• Track and report:
• Total Vulnerabilities
• Critical Vulnerabilities
• High Vulnerabilities
• Remediation Trends
• SLA Compliance
• Asset Coverage
• Scan Coverage
• Vulnerability Aging
• Risk Reduction Metrics
  

Reporting Tools

• Qualys Reporting
• Power BI
• Excel Dashboards
• ServiceNow Reporting
  
  

Sample Reports

• Weekly Executive Security Dashboard
• Monthly Vulnerability Review
• Risk-Based Prioritization Reports
• Regulatory Compliance Reports
• KPI/KRI Reports
• Vulnerability Trending Analysis
  
  

Vulnerability Remediation Governance

• Coordinate remediation activities with:
• Windows Teams
• Linux Teams
• Network Teams
• Application Owners
• Conduct remediation review meetings.
• Monitor SLA adherence.
• Define remediation priorities based on:
• CVSS
• EPSS
• Exploit Availability
• Asset Criticality
• Validate fixes through rescanning.
  

Automation & Integration

• Utilize Qualys APIs for automation.
• Integrate Qualys with:
• ServiceNow
• Jira
• CMDB
• SIEM Platforms
• Develop scripts using:
• PowerShell
• Python
• Automate reporting and remediation tracking.
  

Required Skills

Vulnerability Management

• Vulnerability Lifecycle Management
• Risk-Based Vulnerability Management
• CVSS v3/v4
• Vulnerability Prioritization
• Remediation Validation
• Executive Reporting
• Audit Support
  
  

Qualys Expertise

• Qualys VMDR
• Qualys Gateway Service (QGS)
• Asset Management
• Policy Compliance
• Patch Management Module
• Report Templates
• Dynamic Tagging
• Cloud Agents
• Scanner Appliances
• VMDR Dashboards
  
  

Operating Systems

• Windows Server
• Linux (RHEL, CentOS, Ubuntu)
• Active Directory
• DNS
• DHCP
  
  

Cloud Platforms

• Azure
• AWS
• Oracle Cloud (OCI)
• VMware
• Hybrid Cloud
  
  

Tools

• Qualys VMDR
• ServiceNow
• Power BI
• Excel
• Splunk / Sentinel
• Jira
  
  

Preferred Certifications

• Qualys VMDR Specialist
• Qualys Certified Professional
• CISSP
• CEH
• Security+
• Microsoft Azure Security Certifications
  
  

Good-to-Have

Armis Asset Intelligence & Exposure Management

Required Armis Experience

• Administer and support Armis platform deployments.
• Perform enterprise asset discovery and inventory management.
• Monitor managed, unmanaged, IoT and OT assets.
• Identify vulnerable, rogue, and end-of-life assets.
• Correlate asset intelligence with Qualys vulnerability findings.
• Leverage Armis for attack surface visibility and cyber asset exposure management.
• Track device ownership and remediation accountability.
• Create exposure-based risk reports using Armis insights.
• Monitor:
• IoT Devices
• Network Infrastructure
• Endpoints
• Cloud-connected Assets
  

Armis Integrations

• Qualys VMDR
• ServiceNow CMDB
• Microsoft Sentinel
• Splunk
• CrowdStrike
• Active Directory
  
  

Responsibilities

Key Responsibilities

Vulnerability Management OPS and implementation.

• Lead enterprise-wide Vulnerability Management program using Qualys VMDR.
• Own the complete vulnerability lifecycle:
• Discovery
• Assessment
• Prioritization
• Remediation Tracking
• Validation
• Reporting
• Develop risk-based remediation strategies aligned with business priorities.
• Review and validate Critical, High, and Zero-Day vulnerabilities.
• Drive vulnerability reduction initiatives and SLA compliance programs.
• Conduct vulnerability trend analysis and management reviews.
• Qualys VMDR Administration
• Serve as Subject Matter Expert (SME) for Qualys VMDR.
• Design and maintain:
• Asset Groups
• Dynamic Tags
• Business Units
• Scan Profiles
• Option Profiles
• Remediation Policies
• Manage authenticated scanning for:
• Windows
• Linux
• Network Devices
• Databases
• Optimize scan performance and asset coverage.
• Troubleshoot scanning failures and credential issues.
• Manage VMDR Dashboards and Reporting Frameworks.
• Qualys Gateway Service (QGS) Migration & Management
• Primary Focus Area
• Lead QGS migration projects from On-Prem to Cloud environments.
• Responsibilities
• Design migration architecture for Qualys Gateway Services.
• Install, configure, upgrade, and maintain QGS infrastructure.
• Perform migration planning, testing, deployment, and rollback activities.
• Conduct connectivity validation and health checks.
• Validate scanner communication between:
• Qualys Cloud Platform
• Internal Assets
• Remote Networks
• Troubleshoot:
• Connectivity issues
• Certificate issues
• Firewall restrictions
• Network routing issues
• Coordinate with:
• Network Teams
• Cloud Teams
• Infrastructure Teams
• Develop QGS migration runbooks and operational documentation.
• Perform post-migration health checks and stabilization activities.
• Develop migration runbooks and operational documentation.
• Expected Experience
• Multiple QGS deployment and migration projects.
• Hybrid cloud environments.
• Azure, AWS, OCI, VMware environments.
• Proxy and firewall integrations.
• Executive Reporting & Metrics
• Must Have Expertise
• Build Executive Vulnerability Dashboards.
• Present cyber risk posture to leadership teams.
• Track and report:
• Total Vulnerabilities
• Critical Vulnerabilities
• High Vulnerabilities
• Remediation Trends
• SLA Compliance
• Asset Coverage
• Scan Coverage
• Vulnerability Aging
• Risk Reduction Metrics
• Reporting Tools
• Qualys Reporting
• Power BI
• Excel Dashboards
• ServiceNow Reporting
• Sample Reports
• Weekly Executive Security Dashboard
• Monthly Vulnerability Review
• Risk-Based Prioritization Reports
• Regulatory Compliance Reports
• KPI/KRI Reports
• Vulnerability Trending Analysis
• Vulnerability Remediation Governance
• Coordinate remediation activities with:
• Windows Teams
• Linux Teams
• Network Teams
• Application Owners
• Conduct remediation review meetings.
• Monitor SLA adherence.
• Define remediation priorities based on:
• CVSS
• EPSS
• Exploit Availability
• Asset Criticality
• Validate fixes through rescanning.
• Automation & Integration
• Utilize Qualys APIs for automation.
• Integrate Qualys with:
• ServiceNow
• Jira
• CMDB
• SIEM Platforms
• Develop scripts using:
• PowerShell
• Python
• Automate reporting and remediation tracking.
• Required Skills
• Vulnerability Management
• Vulnerability Lifecycle Management
• Risk-Based Vulnerability Management
• CVSS v3/v4
• Vulnerability Prioritization
• Remediation Validation
• Executive Reporting
• Audit Support
• Qualys Expertise
• Qualys VMDR
• Qualys Gateway Service (QGS)
• Asset Management
• Policy Compliance
• Patch Management Module
• Report Templates
• Dynamic Tagging
• Cloud Agents
• Scanner Appliances
• VMDR Dashboards
• Operating Systems
• Windows Server
• Linux (RHEL, CentOS, Ubuntu)
• Active Directory
• DNS
• DHCP
• Cloud Platforms
• Azure
• AWS
• Oracle Cloud (OCI)
• VMware
• Hybrid Cloud
• Tools
• Qualys VMDR
• ServiceNow
• Power BI
• Excel
• Splunk / Sentinel
• Jira
  

Qualifications

ABOUT US

At Zensar, we're experience-led everything. We are committed to conceptualizing, designing, engineering, marketing, and managing digital solutions and experiences for over 130 leading enterprises. We are a company driven by a bold purpose: Together, we shape experiences for better futures. Whether for our clients, our people, or the world around us, this belief powers everything we do. At the heart of our culture is ONE with Client - a set of four core values that reflect who we are and how we work: One Zensar, Nurturing, Empowering, and Client Focus.

Part of the $4.8 billion RPG Group, we're a community of 10,000+ innovators across 30+ global locations, including Milpitas, Seattle, Princeton, Cape Town, London, Zurich, Singapore, and Mexico City. Explore Life at Zensar and join us to Grow. Own. Achieve. Learn. to be the best version of yourself.

We believe the best work happens when individuality is celebrated, growth is encouraged, and well-being is prioritized. We are an equal employment opportunity (EEO) and affirmative action employer, committed to creating an inclusive workplace. All qualified applicants will be considered without regard to race, creed, color, ancestry, religion, sex, national origin, citizenship, age, sexual orientation, gender identity, disability, marital status, family medical leave status, or protected veteran status.