Vulnerability Management (Qualys Security Analyst)

Primary Duties and Responsibilities  Work with customers to coordinate, conduct, and tune network and system vulnerability scans prior to deployment and when those systems are modified within pre-production and production environments  Responsible for understanding, reviewing, and interpreting assessment and scanning results, reducing false positive findings, and acting as a trusted security advisor to the client.  Learn and adapt to client’s culture, security strategies, security goals, security objectives, and security capabilities  Identify client’s organizational position and posture against emerging and zero day  Maintain knowledge of outstanding vulnerability management issues as it pertains to the Client’s Vulnerability Management Service and communicate updates to Client as appropriate  Present Vulnerability Assessment Scanning and guidance, False Positive Validation, Compliance Scanning and, scan profile and policy creation  Provide system administrators, system owners, and IT support staff with effective vulnerability mitigation strategies, meaningful vulnerability metrics, security controls and or corrective actions for mitigating technical and business risk  Develop and report enterprise-level metrics for vulnerabilities and remediation progress  Understand, demonstrate, and educate stakeholders on the real-world impact of threats and vulnerability exploitation in a given environment  Manage multiple customer requests, assessments, and meet customer expectations within established service levels Qualifications  Background in security threat analysis – ability to determine risk level of identified threats and necessary urgency in remediation  Possess strong technical understanding of common network and system vulnerabilities  Understanding of networking principles (OSI Model, routing, TCP/IP)  Windows and Linux operating systems, and basic administration  Best practices in common security technologies  Problem solving skills and ability to work under pressure in a rapid paced, customer facing 24/7 production environment  Experience working with cross-business and cross-functional teams in a geographically distributed environment  Setting up scanning profiles, conducting routine scans of our environment, oversee remediation efforts, etc.  Willingness to share on-call responsibilities, work non-standard hours, and travel when required  Willingness to accept direction, support leadership vision, and to serve as a point of contact directly supporting vulnerability assessments, system owners, and executives  Excellent written and verbal communication skills Must Have Skills  Minimum 2 years of experience with Qualys  Experienced in setting up scanning profiles, conducting routine scans of security environment, oversee remediation efforts, etc. Originally posted on Himalayas