Senior Administrator - NESSUS, Compliance Remediation

Teknik, data och digitalt · IT-infrastruktur och säkerhet · Cybersäkerhet · DevOps

I korthet

The Senior Administrator role focuses on driving the remediation of vulnerabilities and improving the organization's security posture by performing vulnerability scanning and assessment using Qualys VM/VMDR. This position requires strong coordination skills to work with various technical teams for vulnerability tracking, remediation, and reporting.

Ansvarsområden

Perform vulnerability scanning and assessment using Qualys VM/VMDR.
Configure and manage Qualys scanners, scan profiles, asset groups/tags, authentication records, and scan schedules.
Analyze vulnerability scan results and validate identified vulnerabilities and potential false positives.
Prioritize vulnerabilities based on CVSS severity, exploitability, asset criticality, exposure, and business risk.
Use Qualys capabilities such as QIDs, TruRisk, threat intelligence, and vulnerability detection information for risk-based prioritization.
Coordinate with Windows, Linux, Network, Database, Cloud, Middleware, and Application teams for vulnerability remediation.
Track vulnerabilities through the complete lifecycle from identification → assignment → remediation → validation → closure.
Perform remediation validation and execute re-scans to confirm vulnerability closure.
Monitor vulnerabilities against agreed remediation SLAs and highlight overdue or high-risk findings.
Support remediation of critical and zero-day vulnerabilities through expedited assessment and tracking.
Generate periodic vulnerability dashboards and reports covering critical/high vulnerabilities, aging vulnerabilities, SLA compliance, remediation progress, vulnerability trends, and business/unit or technology-level risk.
Support vulnerability exceptions and risk acceptance processes, including appropriate documentation and expiry tracking.
Assist infrastructure teams with understanding vulnerability findings and recommended remediation.
Support security audits, compliance assessments, and vulnerability-related evidence requirements.
Work with ServiceNow, Jira, or similar ITSM/ticketing platforms for vulnerability tracking and remediation workflow.
Continuously improve vulnerability scanning coverage, reporting accuracy, and remediation processes.

Krav

Strong hands-on experience with Qualys VM/VMDR.
Good understanding of Vulnerability Management lifecycle, CVE and CVSS, QIDs, Qualys TruRisk, Windows and Linux vulnerabilities, Network and infrastructure vulnerabilities, and Patch and configuration vulnerabilities.
Experience with authenticated and unauthenticated vulnerability scanning.
Understanding of vulnerability remediation, patch management, and server hardening.
Ability to analyze security vulnerabilities and translate technical findings into actionable remediation recommendations.
Good knowledge of common security standards/frameworks such as CIS Controls, NIST, and ISO 27001.
Experience creating vulnerability dashboards, metrics, and management-level reports.
Strong coordination and communication skills for working with technical and business stakeholders.

Önskade kvalifikationer

Experience with Qualys Policy Compliance, Cloud Agent, Web Application Scanning, or Patch Management.
Exposure to Azure, AWS, or other cloud environments.
Experience with ServiceNow Vulnerability Response.
Knowledge of Power BI, Excel, PowerShell, Python, or APIs for vulnerability reporting and automation.
Security certifications such as CompTIA Security+, CEH, Qualys certifications, CISSP, or equivalent.

Förmåner

You'll supercharge your potential.
You'll find your career.
You'll find your spark.
A place that knows that helping its customers stay on top starts by putting its people first.

Färdigheter

Qualys VM/VMDRVulnerability ManagementCVSSQIDsNISTISO 27001ServiceNowJiraPower BIExcelPowerShellPythonAPIsCompTIA Security+CEHCISSP

#NESSUS#Compliance Remediation#Vulnerability Management#Security#Qualys#IT Administration#Risk Management#Cybersecurity#IT Support#IT Infrastructure

Om HCLTech

Supercharging progress through technology and innovation

HCLTech is a global technology company, home to 219,000+ people across 54 countries, delivering industry-leading capabilities centered around digital, engineering and cloud, powered by a broad portfolio of technology services and products. We work with clients across all major verticals, providing industry solutions for Financial Services, Manufacturing, Life Sciences and Healthcare, Technology and Services, Telecom and Media, Retail and CPG, and Public Services. Consolidated revenues as of 12 months ending September 2022 totaled $12.1 billion. To learn how we can supercharge progress for…

Se alla lediga jobb hos HCLTech Läs mer om HCLTech Webbplats