Vulnerability Management & Security Assessment Engineer (L2) – Qualys VMDR

Position summary:

Responsible for enterprise InfoSec operations covering vulnerability scanning and analysis, security assessments, control reviews, remediation validation, compliance reporting and incident management. The role focuses on technical troubleshooting, evidence validation, remediation coordination and continuous operational improvement.

Key Responsibilities:

Vulnerability Management Operations (Scanning & Analysis)

• Administer and troubleshoot vulnerability scans using Qualys VMDR or equivalent platforms.
• Investigate scan failures, authentication issues, scanner connectivity and asset discovery gaps.
• Analyze CVEs, CVSS severity, affected assets and vulnerability trends.
• Validate asset coverage and investigate discrepancies in scan results.
• Support risk-based prioritization based on severity, exploitability, asset criticality and remediation SLAs.
• Investigate recurring findings and potential false positives; coordinate with Security SMEs as required.

 Security Assessment & Review Support

• Coordinate technical security assessments and infrastructure control reviews.
• Review evidence for access management, patching, configuration compliance, logging and backup controls.
• Validate submitted evidence against defined security requirements and assessment checklists.
• Identify control gaps, missing evidence, policy deviations and compliance issues.
• Coordinate with infrastructure and application owners to resolve assessment observations.
• Maintain assessment records and escalate complex control interpretation issues to Security or Risk SMEs.

 Remediation Tracking & SLA Monitoring (Including Rescan Validation)

• Coordinate remediation activities with Server, Network, Database, Cloud and Application teams.
• Track vulnerability aging, action owners, remediation deadlines and SLA breaches.
• Review remediation plans and follow up on overdue critical and high-severity findings.
• Validate remediation through rescans and review updated vulnerability status.
• Investigate recurring vulnerabilities and discrepancies between remediation claims and scan results.
• Track exceptions and escalate unresolved findings for appropriate risk review and approval.

 Compliance Reporting & Audit Support

• Generate vulnerability, remediation aging, assessment status and compliance reports.
• Analyze trends, overdue findings, SLA breaches and recurring control deficiencies.
• Maintain vulnerability registers, assessment trackers, dashboards and evidence repositories.
• Support internal and external audits by coordinating and validating technical evidence.
• Track compliance against organizational security policies and applicable control frameworks.
• Recommend improvements to reporting accuracy, evidence quality and audit readiness.

 Incident & Service Management (Including Improvement)

• Troubleshoot complex vulnerability management platform and assessment workflow incidents.

More roles at Gruve

Security Operations Analyst (L1) – MS- DefenderRemoteEndpoint Operations Analyst (L1) – Intune & SCCMRemoteL1 System Administrator | Windows, VMware & Cloud OperationsRemoteEndpoint Security Operations Engineer (L2) – Microsoft DefenderRemoteIdentity & Access Operations Engineer (L2) – Active Directory, LDAP & ADFSRemoteEndpoint Management Engineer (L2) – Intune & SCCM/MECMRemote

See Gruve & thousands more on the map

Every tech & IT company hiring across India — with AI match scores — on one live map.

Open the map →