Sr. Engineer - Cybersecurity N 4B

Overview

Senior Security Analyst (TVM Operations) responsible for the daily execution of the Qualys platform (VMDR, CSAM, EASM) to detect vulnerabilities, discover unmanaged assets and monitor the external attack surface, acting as the source of truth for partner teams.

What you'll do

• Manage the daily health of the Qualys subscription, specifically VMDR, CSAM and EASM.
• Continuously monitor the network for unmanaged devices and unauthorized software; work with IT to install agents or decommission shadow IT.
• Monitor the organization's external footprint and identify and alert on unexpected public-facing assets, open ports or expired certificates.
• Translate scan findings into actionable Jira tickets, assign them to Server, Network and Cloud partner teams, and advocate for security tasks in sprint planning and backlog reviews.
• Execute validation scans (re-scans) once partner teams mark Jira tickets as "Resolved" to confirm closure.
• Configure and schedule discovery and vulnerability scans, and manage scanner appliances and exclude lists.
• Review technical evidence provided by partner teams to validate "False Positive" or "Risk Acceptance" requests.
• Generate weekly operational reports on open vs. closed vulnerabilities, remediation SLAs and agent health.
• Troubleshoot Qualys Cloud Agents on endpoints that have stopped reporting or are failing to authenticate.
• When high-profile vulnerabilities are announced, use VMDR and CSAM to provide immediate impact assessments to leadership.

What you'll need

• Bachelor's degree in information security, computer science, or equivalent operational experience.
• Proven operational experience with Qualys VMDR (running scans, analyzing results).
• Experience using Qualys CSAM or similar tools to reconcile asset inventories and identify coverage blind spots.
• Experience with EASM concepts, including understanding DNS, public IP ranges and identifying assets that shouldn't be on the internet.
• Strong working knowledge of Jira, including using JQL to search for issues and create dashboards.
• A track record of successfully working with System Administrators and DevOps teams.
• Sufficient knowledge of Windows, Linux and networking to help partner teams understand where a vulnerability is located and why it needs fixing.
• Ability to diagnose why a scanner can't reach a host or why an agent is offline.
• Ability to correlate an external finding (EASM) with an internal vulnerability (VMDR) to determine true risk.
• Certified Information Systems Security Professional (CISSP).
• Required skills include Application Security, Cloud IAM, Identity Access Management (IAM), Security Architecture Design, Security Framework, Security Policies, Security Standards, Metrics Reporting and Forensics.
• English language proficiency at C2 (Proficient).

Nice to have

• Qualys Certified Specialist in CSAM or VMDR.
• Knowledge of Cloud (AWS/Azure) asset discovery and vulnerability or misconfiguration remediation.
• Experience with risk-based prioritization (focusing on what is exploitable vs. just high severity).

Details

• Location: Hyderabad, India (Floor 1 to 12, Hafeezpet Phoenix).
• Work mode: Hybrid.
• Work shift: Flex Time (India).
• Job type: Regular.