Qualys System Administrator

ASSYST, Inc.•Rockville, MD

10d•Onsite

About The Position

ASSYST is seeking is seeking an experienced Qualys System Administrator to support and enhance enterprise vulnerability management and risk reduction initiatives. This role focuses on administering the Qualys Cloud Platform, driving vulnerability lifecycle operations, and enabling compliance and reporting across the organization. You will collaborate with Security, GRC, Infrastructure, and Application teams to ensure accurate asset visibility, risk prioritization, and remediation tracking.

Requirements

Hands-on experience with Qualys VMDR administration
Strong understanding of vulnerability management, CVEs, and CVSS scoring
Experience managing enterprise-scale scanning environments
Knowledge of Windows, Linux, networking, AWS/Azure
Experience with asset tagging, inventory management, and data normalization
Scripting/automation skills (Python, PowerShell, REST APIs)
Experience integrating Qualys with ServiceNow (ITSM/GRC)

Nice To Haves

Familiarity with NIST, RMF, HIPAA, ISO 27001 frameworks
Experience supporting audits and risk management processes
Certifications such as Qualys VMDR, Security+, CEH, CISSP, or CISA

Responsibilities

Administer and manage the Qualys Cloud Platform (VMDR, Asset Inventory)
Configure and maintain internal, passive, and cloud-based scanners
Execute vulnerability scans across on-prem, cloud, and endpoint environments
Validate scan results, reduce false positives, and ensure data accuracy
Perform risk-based vulnerability prioritization using CVSS, threat intelligence, and business context
Partner with technical teams to drive remediation and validate fixes
Map vulnerabilities to frameworks such as NIST, HIPAA, ISO 27001
Generate dashboards, reports, and executive-level summaries
Automate workflows and integrations using Qualys APIs, Python/PowerShell, and ServiceNow
Maintain SOPs and support audits, risk reviews, and incident response activities