Senior Qualys Engineer Deployment & Administration

Lead deployment and onboarding of the Qualys platform for new clients, including sensor architecture, network design, and rollout planning. Deploy and manage Qualys Cloud Agents, scanner appliances (virtual and physical), passive sensors, and Cloud Connectors across on-prem, cloud, and hybrid environments. Configure and optimize core modules VMDR, Policy Compliance (PC), Patch Management (PM), Web Application Scanning (WAS), and CyberSecurity Asset Management (CSAM). Design and tune authenticated and unauthenticated scans, credential management, scan scheduling, and performance to minimize business impact. Build and maintain asset tagging, dynamic asset groups, and business-unit structures for accurate, scalable reporting. Integrate Qualys with client ecosystems SIEM, ITSM (ServiceNow, Jira), CMDB, and ticketing via APIs and connectors. Develop dashboards, reports, and scorecards mapped to client risk posture and remediation SLAs. Manage platform administration: user roles, RBAC, subscriptions, module licensing, and multi-tenant separation. Support vulnerability remediation cycles validation, false-positive analysis, exception handling, and re-scan verification. Align deployments and compliance scanning to regulatory frameworks relevant to clients (ISO 27001, NCA ECC, SAMA CSF, PCI DSS, CIS Benchmarks).

Desired Candidate Profile

Required Qualifications 5+ years in vulnerability management, with 3+ years hands-on deploying and administering the Qualys platform. Deep expertise across VMDR and at least two of: PC, PM, WAS, CSAM. Strong working knowledge of Qualys sensor architecture, Cloud Agent deployment at scale, and appliance management. Experience integrating Qualys via the Qualys API (REST/XML) with SIEM, ITSM, or CMDB platforms. Solid grounding in networking (TCP/IP, firewalls, segmentation), operating systems (Windows, Linux), and cloud (AWS, Azure). Understanding of CVSS, CVE, vulnerability prioritization, and risk-based remediation. Familiarity with at least one compliance framework (ISO 27001, PCI DSS, CIS, NCA ECC, or SAMA CSF). Strong documentation, stakeholder communication, and client-facing skills. Preferred / Nice to Have Qualys Certified Specialist certifications (VMDR, PC, or equivalent). Scripting for automation (Python, PowerShell, Bash) against the Qualys API. Experience in an MSSP or multi-tenant service-delivery environment. Exposure to other VM tools (Tenable, Rapid7) for migration or comparison work.