ZipRecruiter

Log In

1

Temporary Qualys Vulnerability Management Jobs in Virginia

Qualys

ETM Sales Specialist

Virginia Beach, VA · On-site

About Qualys Qualys, Inc. is a pioneer and leading provider of disruptive cloud-based IT, security, ... Strong understanding of vulnerability management, risk exposure concepts (CVEs, CVSS), and attack ...

Unissant

Vulnerability Management Lead

Herndon, VA · On-site

$105K - $138K/yr

We are seeking a Vulnerability Management Lead to join our team and support our client. The ideal ... Additional onsite meetings or temporary support within Federally controlled facilities may be ...

Unissant

Vulnerability Management Lead

Herndon, VA · On-site

$105K - $138K/yr

We are seeking a Vulnerability Management Lead to join our team and support our client. The ideal ... Additional onsite meetings or temporary support within Federally controlled facilities may be ...

next page

Showing results 1-20

All JobsQualys Vulnerability Management JobsTemporary Qualys Vulnerability Management JobsTemporary Qualys Vulnerability Management Jobs in Virginia

Temporary Qualys Vulnerability Management information

What is a temporary Qualys Vulnerability Management role?

A Temporary Qualys Vulnerability Management role involves using the Qualys platform to identify, assess, and help remediate vulnerabilities in an organization's IT environment on a short-term or contract basis. Professionals in this position scan networks and systems for security weaknesses, analyze findings, and work with IT teams to mitigate risks. They may also generate reports, ensure compliance with security policies, and assist during cybersecurity audits. This role is typically project-based, focusing on specific security goals or during periods of increased vulnerability management needs.

What are the key skills and qualifications needed to thrive as a temporary Qualys Vulnerability Management professional?

To thrive as a Temporary Qualys Vulnerability Management professional, you need a strong understanding of cybersecurity principles, vulnerability assessment processes, and experience with vulnerability management platforms, particularly Qualys. Familiarity with tools such as Qualys Cloud Platform, network scanning systems, and relevant certifications like CompTIA Security+ or CISSP are often required. Analytical thinking, attention to detail, and effective communication skills help in identifying risks and collaborating with IT teams. These skills are crucial to accurately detect, prioritize, and remediate security vulnerabilities, ensuring the organization’s systems remain protected against cyber threats.

What are some common challenges faced in a temporary Qualys Vulnerability Management role, and how can they be addressed?

In a temporary Qualys Vulnerability Management role, professionals often encounter challenges such as quickly familiarizing themselves with existing security policies, integrating with established IT teams, and managing tight project deadlines. Since the position is temporary, adapting to company-specific configurations and understanding the organization's asset landscape in a short period is crucial. Effective communication with both IT and security teams helps address these challenges, as does leveraging documentation and automated reporting features within Qualys to streamline vulnerability assessments and remediation tracking.

What is the difference between Temporary Qualys Vulnerability Management vs Temporary Cybersecurity Analyst?

AspectTemporary Qualys Vulnerability ManagementTemporary Cybersecurity Analyst
CertificationsVulnerability management tools, basic security certificationsSecurity+, CISSP, CEH (preferred)
Work EnvironmentSecurity teams, vulnerability scanning projectsSecurity operations centers, incident response teams
Industry UsageIT security, vulnerability assessment firmsCorporate security departments, consulting firms
Search IntentVulnerability management, security scanningSecurity analysis, threat detection

Temporary Qualys Vulnerability Management focuses on identifying and managing security vulnerabilities using tools like Qualys, often within IT security teams. Temporary Cybersecurity Analysts have broader roles, including analyzing threats, monitoring security systems, and responding to incidents. While both roles require security knowledge, the former emphasizes vulnerability scanning, and the latter encompasses a wider range of security functions.

What are the most commonly searched types of Qualys Vulnerability Management jobs in Virginia?

The most popular types of Qualys Vulnerability Management jobs in Virginia are:

What are popular job titles related to Temporary Qualys Vulnerability Management jobs in Virginia?

For Temporary Qualys Vulnerability Management jobs in Virginia, the most frequently searched job titles are:

What job categories do people searching Temporary Qualys Vulnerability Management jobs in Virginia look for?

The top searched job categories for Temporary Qualys Vulnerability Management jobs in Virginia are:

What cities in Virginia are hiring for Temporary Qualys Vulnerability Management jobs?

Cities in Virginia with the most Temporary Qualys Vulnerability Management job openings:

Temporary Qualys Vulnerability Management jobs near you

Vulnerability Management Engineer

Digital Global Connectors

Mclean, VA • On-site

$110 - $160/hr

Other

This job post has expired today. Applications are no longer accepted.

Job description

Vulnerability Management Engineer Location:

Bethesda, MD (Hybrid; On-site as Required)

Clearance:

Tier 2 Public Trust (Required)

Employment Type:

Full-Time

Position Summary

Digital Global Connectors (DGC) is seeking an experienced Vulnerability Management Engineer to support a Federal information security program. The Vulnerability Management Engineer is responsible for identifying, assessing, prioritizing, tracking, and supporting the remediation of security vulnerabilities across enterprise information systems, cloud environments, applications, databases, network infrastructure, and endpoint devices.

This position performs enterprise vulnerability assessments, validates remediation efforts, supports continuous monitoring activities, and works closely with Security Engineers, ISSOs, System Administrators, Cloud Engineers, Security Operations Center (SOC) personnel, and program leadership to reduce organizational cyber risk and strengthen the overall cybersecurity posture.

The successful candidate will possess extensive experience administering enterprise vulnerability management platforms, performing technical vulnerability assessments, and implementing risk-based remediation strategies within large enterprise environments.

Essential Duties and Responsibilities: Enterprise Vulnerability Assessments
  • Conduct enterprise vulnerability assessments across servers, workstations, databases, network infrastructure, cloud environments, applications, and endpoint devices.
  • Perform authenticated and unauthenticated vulnerability scans.
  • Analyze vulnerability assessment results to determine severity and organizational impact.
  • Validate scan accuracy and eliminate false positives.
  • Identify systemic security weaknesses and recurring vulnerabilities.
  • Maintain vulnerability assessment schedules supporting continuous monitoring activities.
Vulnerability Management
  • Prioritize vulnerabilities using risk-based methodologies.
  • Coordinate remediation activities with System Administrators, Cloud Engineers, Security Engineers, and System Owners.
  • Track remediation progress through completion.
  • Validate successful remediation of identified vulnerabilities.
  • Recommend mitigation strategies when immediate remediation is not feasible.
  • Monitor aging vulnerabilities and escalation thresholds.
Security Configuration Compliance
  • Assess compliance with DISA Security Technical Implementation Guides (STIGs), CIS Benchmarks, Microsoft Security Baselines, and organizational configuration standards.
  • Identify configuration weaknesses affecting system security.
  • Recommend secure configuration improvements.
  • Validate implementation of security hardening recommendations.
  • Support configuration compliance reporting.
  • Assist technical teams with remediation planning.
Vulnerability Assessment Tools

Administer and operate enterprise vulnerability management technologies including:

  • Tenable Security Center
  • Nessus Manager
  • Nessus Professional
  • Nessus Agents
  • Microsoft Defender Vulnerability Management
  • Qualys VMDR
  • Rapid7 InsightVM
  • Microsoft Defender for Cloud
  • AWS Inspector
  • Azure Security Center
  • Security Content Automation Protocol (SCAP) tools

Maintain vulnerability scanning infrastructure and ensure scanning activities are performed efficiently and accurately.

Cloud Vulnerability Management
  • Perform vulnerability assessments across Microsoft Azure, Microsoft 365, Amazon Web Services (AWS), and hybrid cloud environments.
  • Assess cloud resource configurations for security weaknesses.
  • Identify cloud misconfigurations and excessive permissions.
  • Validate cloud security posture following remediation.
  • Support cloud compliance initiatives.
  • Recommend improvements to cloud vulnerability management processes.
Risk Management Framework (RMF) Support
  • Support implementation of NIST SP 800-53 security controls related to vulnerability management.
  • Provide technical evidence supporting Authorization to Operate (ATO) activities.
  • Assist ISSOs and Security Assessors during Security Control Assessments (SCAs).
  • Validate remediation of technical findings identified during security assessments.
  • Support continuous monitoring reporting requirements.
  • Maintain documentation supporting RMF activities.
Reporting and Metrics

Develop and maintain:

  • Vulnerability Assessment Reports
  • Executive Vulnerability Dashboards
  • Remediation Status Reports
  • POA&M Support Documentation
  • Vulnerability Trend Reports
  • Security Metrics
  • Compliance Reports
  • Continuous Monitoring Reports
  • Risk Assessments
  • Standard Operating Procedures

Ensure reporting accurately reflects enterprise vulnerability status and supports executive decision-making.

Collaboration
  • Coordinate with Security Engineers, ISSOs, System Administrators, Cloud Engineers, SOC Analysts, Threat Hunters, Security Assessors, and Government stakeholders.
  • Participate in vulnerability review meetings.
  • Provide technical guidance regarding vulnerability remediation priorities.
  • Support enterprise cybersecurity initiatives and security assessments.
  • Assist with troubleshooting vulnerability scanning issues.
Continuous Improvement
  • Monitor emerging vulnerabilities, Common Vulnerabilities and Exposures (CVEs), Common Weakness Enumerations (CWEs), and evolving attack techniques.
  • Evaluate new vulnerability management technologies.
  • Recommend improvements to enterprise vulnerability management processes.
  • Support automation initiatives that improve vulnerability detection and remediation.
  • Maintain professional certifications and technical expertise.
Minimum Qualifications
  • Bachelor's degree in Cybersecurity, Computer Science, Information Technology, Information Systems, Engineering, or a related discipline.
  • Minimum four (4) years of experience performing enterprise vulnerability management or vulnerability assessment activities.
  • Experience administering Tenable, Qualys, Rapid7, Microsoft Defender Vulnerability Management, or comparable enterprise vulnerability management platforms.
  • Experience supporting Windows, Linux, network, cloud, and hybrid environments.
  • Familiarity with NIST SP 800-53, the Risk Management Framework (RMF), and Federal cybersecurity requirements.
  • Strong analytical, troubleshooting, documentation, and communication skills.
  • U.S. Citizenship required.
  • Ability to obtain and maintain a Tier 2 Public Trust.
Preferred Qualifications
  • Master's degree in Cybersecurity, Information Assurance, Computer Science, Engineering, or a related discipline.
  • Experience supporting a Federal civilian agency.
  • Experience supporting Microsoft Azure, Microsoft 365, or AWS cloud environments.
  • Experience implementing Security Content Automation Protocol (SCAP) compliance tools.
  • Tenable Certified Nessus Expert
  • CompTIA CySA+
  • CompTIA Security+
  • GIAC Continuous Monitoring Certification (GMON)
  • Certified Information Systems Security Professional (CISSP) (preferred)
  • Microsoft Certified: Azure Security Engineer Associate (AZ-500) (preferred)
Knowledge, Skills, and Abilities
  • Vulnerability Management
  • Vulnerability Assessments
  • Risk-Based Vulnerability Prioritization
  • Tenable Security Center
  • Nessus
  • Microsoft Defender Vulnerability Management
  • Qualys VMDR
  • Rapid7 InsightVM
  • Microsoft Defender for Cloud
  • AWS Inspector
  • Azure Security Center
  • DISA STIGs
  • CIS Benchmarks
  • Security Configuration Compliance
  • Security Content Automation Protocol (SCAP)
  • Windows Security
  • Linux Security
  • Cloud Security
  • Microsoft Azure
  • Amazon Web Services (AWS)
  • Risk Management Framework (RMF)
  • NIST SP 800-53
  • Federal Information Security Modernization Act (FISMA)
  • Common Vulnerabilities and Exposures (CVEs)
  • Common Weakness Enumeration (CWE)
  • POA&M Management
  • Technical Documentation
  • Microsoft Office Suite
  • ServiceNow
  • Jira
Security Requirements
  • Ability to successfully obtain and maintain a Tier 2 Public Trust investigation.
  • Compliance with all applicable Federal security, privacy, ethics, and information assurance training requirements before receiving system access.
  • Ability to support enterprise vulnerability management operations, scheduled maintenance windows, continuity of operations (COOP), emergency response activities, and surge support as required.
  • Must maintain strict confidentiality while handling vulnerability assessment data, system configurations, compliance findings, remediation information, and Federal information systems.
  • Ability to identify, assess, prioritize, and support remediation of enterprise vulnerabilities while collaborating with Government stakeholders, technical teams, and program leadership to reduce organizational cyber risk and improve the security posture of enterprise information systems.
#J-18808-Ljbffr

Apply