QualysGuard Vulnerability Management

Position Summary

Level: Senior Consultant

Work you’ll do:

As a Vulnerability Management and Asset Discovery Consultant, you will support the execution of Qualys scanning, asset reconciliation, and Qualys Cloud Agent deployment activities across server and desktop environments.

• Fulfill ad hoc Qualys scan requests across enterprise assets.
  
• Analyze scan results and communicate findings to requestors and relevant stakeholders.
  
• Create and coordinate change tickets for recurring monthly scans and agent deployment activities.
  
• Prepare monthly discovery and asset true-up documentation.
  
• Reconcile expected asset coverage from the Candor report against assets identified in Qualys.
  
• Identify assets missing Qualys Cloud Agent installation, provisioning, or reporting.
  
• Perform server and desktop asset coverage analysis across Qualys, Candor, and Tanium.
  
• Categorize agent coverage issues, including missing agents, inconsistent agent naming, provisioning gaps, and assets not returned in Tanium.
  
• Support recurring operational reporting and provide timely updates to management and stakeholders.
  
• Respond to ad hoc reporting, analysis, and research requests.
  
• Adhere to Deloitte security, quality, documentation, and operational policies.
  

Through vulnerability scanning, asset discovery, inventory reconciliation, and agent coverage analysis, the team helps organizations identify gaps before they can be exploited by threat actors. This role contributes to the foundational data and operational processes required for effective Attack Surface Management.

Qualifications

Must Have Skills:

• Experience in vulnerability management, cybersecurity operations, IT asset management, or a related technical field.
  
• Hands-on experience with Qualys vulnerability scanning and Qualys Cloud Agent functionality.
  
• Experience executing vulnerability scans and reviewing scan results.
  
• Experience creating and managing IT change requests.
  
• Knowledge of asset discovery, inventory reconciliation, and agent deployment processes.
  
• Experience analyzing asset coverage gaps across multiple technology platforms.
  
• Familiarity with server and desktop operating environments.
  
• Ability to prepare clear operational reports and communicate findings to technical and business stakeholders.
  
• Strong analytical, organizational, and problem-solving skills.
  
• Excellent written and verbal communication skills.
  

Good to Have Skills:

• Experience with Tanium, Candor, ServiceNow, or similar asset management and IT service management platforms.
  
• Experience supporting monthly vulnerability scanning and asset true-up processes.
  
• Knowledge of vulnerability management lifecycle activities, including identification, validation, remediation, and reporting.
  
• Experience troubleshooting endpoint agent installation and provisioning issues.
  
• Familiarity with asset naming conventions, inventory data quality, and configuration management processes.
  
• Understanding of vulnerability concepts such as CVE and CVSS.
  
• Experience working with server infrastructure, desktop environments, and endpoint management teams.
  
• Ability to translate complex data into actionable remediation recommendations.
  
• Experience working in global, cross-functional cybersecurity teams.
  
• Relevant cybersecurity, Qualys, ITIL, or cloud security certifications.