Vulnerability Management Engineer, Security Assessment – Qualys VMDR

Job not on LinkedIn

🔥 1 minute ago

🇮🇳 India – Remote

⏰ Full Time

🟡 Mid-level

🟠 Senior

👮‍♂️ Cybersecurity / Security Engineer

👻 Ghost score 10%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Gruve

WebsiteLinkedInAll Job Openings

201 - 500 employees

Founded 2024

🤖 Artificial Intelligence

🔒 Cybersecurity

🏢 Enterprise

Artificial Intelligence • Cybersecurity • Enterprise

Gruve is an enterprise technology company that designs, builds, and operates AI-ready data center networks and delivers AI-driven solutions for businesses. The company provides Enterprise AI services (including LLM and advanced analytics deployments), AI infrastructure and GPU-rich compute environments, network automation, cybersecurity advisory and managed security services, and workload migration and platform modernization. Gruve positions itself as a provider of AI teammates, customer experience automation, and applied data strategy to help large organizations adopt and scale AI securely.

📋 Description

• Administer and troubleshoot vulnerability scans using Qualys VMDR or equivalent platforms • Investigate scan failures, authentication issues, scanner connectivity and asset discovery gaps • Analyze CVEs, CVSS severity, affected assets and vulnerability trends • Validate asset coverage and investigate discrepancies in scan results • Support risk-based prioritization based on severity, exploitability, asset criticality and remediation SLAs • Investigate recurring findings and potential false positives • Coordinate technical security assessments and infrastructure control reviews • Review and validate evidence for access management, patching, configuration compliance, logging and backup controls • Identify control gaps, missing evidence, policy deviations and compliance issues • Coordinate with infrastructure and application owners to resolve assessment observations • Coordinate remediation activities with Server, Network, Database, Cloud and Application teams • Track vulnerability aging, action owners, remediation deadlines, SLA breaches and exceptions • Validate remediation through rescans and review updated vulnerability status • Generate vulnerability, remediation aging, assessment status and compliance reports • Maintain vulnerability registers, assessment trackers, dashboards and evidence repositories • Support internal and external audits by coordinating and validating technical evidence • Troubleshoot complex vulnerability management platform and assessment workflow incidents • Perform root-cause analysis for recurring scan failures, authentication issues and reporting discrepancies • Manage incidents and service requests within defined SLAs using approved ITSM workflows • Follow ITIL Incident, Problem, Change and Request Management processes • Maintain SOPs, runbooks, knowledge articles and shift handover documentation; provide guidance to L1 • Identify automation opportunities and process improvements, coordinating implementation through approved change procedures

🎯 Requirements

• 3–6 years of experience in cloud infrastructure operations, administration and production support across Microsoft Azure and/or AWS environments • Hands-on experience with Qualys VMDR or equivalent vulnerability management tools • Strong understanding of CVEs, CVSS, vulnerability scanning and remediation validation • Experience with security assessments, technical evidence reviews and control gap identification • Knowledge of Windows/Linux, networking, databases, cloud and enterprise IT environments • Experience with ServiceNow or equivalent ITSM tools, reporting and SLA management • Strong troubleshooting, analytical, documentation and stakeholder coordination skills • Global 24x7x365 support across APAC, EMEA and NLAM, with rotational shifts and follow-the-sun handovers • Qualys certification or exposure to Qualys Policy Compliance and related modules preferred • Knowledge of ISO 27001, SOC 2, CIS Benchmarks or other security frameworks preferred • Exposure to GRC platforms, audit management and risk exception workflows preferred • Basic scripting skills in PowerShell, Python or Shell preferred • Experience with security dashboards, automation and operational process improvement preferred • Security+, ITIL or relevant information security certifications preferred

🏖️ Benefits

• Dynamic environment at a well-funded early-stage startup • Strong customer and partner networks • Culture of innovation, collaboration, and continuous learning • Diverse and inclusive workplace • Equal opportunity employer

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume