# Senior Qualys Engineer — Deployment & Administration

## About the Role

## Key Responsibilities

– Lead deployment and onboarding of the Qualys platform for new clients, including sensor architecture, network design, and rollout planning.

– Deploy and manage Qualys Cloud Agents, scanner appliances (virtual and physical), passive sensors, and Cloud Connectors across on-prem, cloud, and hybrid environments.

– Configure and optimize core modules — VMDR, Policy Compliance (PC), Patch Management (PM), Web Application Scanning (WAS), and CyberSecurity Asset Management (CSAM).

– Design and tune authenticated and unauthenticated scans, credential management, scan scheduling, and performance to minimize business impact.

– Build and maintain asset tagging, dynamic asset groups, and business-unit structures for accurate, scalable reporting.

– Integrate Qualys with client ecosystems — SIEM, ITSM (ServiceNow, Jira), CMDB, and ticketing — via APIs and connectors.

– Develop dashboards, reports, and scorecards mapped to client risk posture and remediation SLAs.

– Manage platform administration: user roles, RBAC, subscriptions, module licensing, and multi-tenant separation.

– Support vulnerability remediation cycles — validation, false-positive analysis, exception handling, and re-scan verification.

– Align deployments and compliance scanning to regulatory frameworks relevant to clients (ISO 27001, NCA ECC, SAMA CSF, PCI DSS, CIS Benchmarks).

## Required Qualifications

– 5+ years in vulnerability management, with 3+ years hands-on deploying and administering the Qualys platform.

– Deep expertise across VMDR and at least two of: PC, PM, WAS, CSAM.

– Strong working knowledge of Qualys sensor architecture, Cloud Agent deployment at scale, and appliance management.

– Experience integrating Qualys via the Qualys API (REST/XML) with SIEM, ITSM, or CMDB platforms.

– Solid grounding in networking (TCP/IP, firewalls, segmentation), operating systems (Windows, Linux), and cloud (AWS, Azure).

– Understanding of CVSS, CVE, vulnerability prioritization, and risk-based remediation.

– Familiarity with at least one compliance framework (ISO 27001, PCI DSS, CIS, NCA ECC, or SAMA CSF).

– Strong documentation, stakeholder communication, and client-facing skills.

## Preferred / Nice to Have

– Qualys Certified Specialist certifications (VMDR, PC, or equivalent).

– Scripting for automation (Python, PowerShell, Bash) against the Qualys API.

– Experience in an MSSP or multi-tenant service-delivery environment.

– Exposure to other VM tools (Tenable, Rapid7) for migration or comparison work.