Qualys System Administrator

ASSYST is seeking is seeking an experienced Qualys System Administrator to support and enhance enterprise vulnerability management and risk reduction initiatives. This role focuses on administering the Qualys Cloud Platform, driving vulnerability lifecycle operations, and enabling compliance and reporting across the organization.

You will collaborate with Security, GRC, Infrastructure, and Application teams to ensure accurate asset visibility, risk prioritization, and remediation tracking.

Job Title: Qualys System Administrator
Location: Rockville, MD

Key Responsibilities:

• Administer and manage the Qualys Cloud Platform (VMDR, Asset Inventory)
• Configure and maintain internal, passive, and cloud-based scanners
• Execute vulnerability scans across on-prem, cloud, and endpoint environments
• Validate scan results, reduce false positives, and ensure data accuracy
• Perform risk-based vulnerability prioritization using CVSS, threat intelligence, and business context
• Partner with technical teams to drive remediation and validate fixes
• Map vulnerabilities to frameworks such as NIST, HIPAA, ISO 27001
• Generate dashboards, reports, and executive-level summaries
• Automate workflows and integrations using Qualys APIs, Python/PowerShell, and ServiceNow
• Maintain SOPs and support audits, risk reviews, and incident response activities

Required Skills & Experience:

• Hands-on experience with Qualys VMDR administration
• Strong understanding of vulnerability management, CVEs, and CVSS scoring
• Experience managing enterprise-scale scanning environments
• Knowledge of Windows, Linux, networking, AWS/Azure
• Experience with asset tagging, inventory management, and data normalization
• Scripting/automation skills (Python, PowerShell, REST APIs)
• Experience integrating Qualys with ServiceNow (ITSM/GRC)

Preferred Qualifications:

• Familiarity with NIST, RMF, HIPAA, ISO 27001 frameworks
• Experience supporting audits and risk management processes
• Certifications such as Qualys VMDR, Security+, CEH, CISSP, or CISA

ASSYST is an Equal Opportunity Employer. Qualified applicants will receive consideration for employment without regard to race, color, religion, sex, age, disability, military status, national origin or any other characteristic protected under federal, state, or applicable local law.