Qualys Platform Engineer

Bank of America Bank of America · Banking · Denver, CO +2

Seeking a Qualys Platform Engineer with 5+ years of IT security or systems engineering experience, including 3+ years focused on Qualys platform engineering. Responsibilities include administering, configuring, and optimizing Qualys VMDR, Cloud Agents, and scanner operations, ensuring asset coverage, scan performance, and data quality. The role involves analyzing vulnerability and compliance findings, partnering with teams for remediation, contributing to automation and integrations using Qualys APIs and scripting (Python, PowerShell, Bash), and supporting ServiceNow integrations. The engineer will also participate in platform monitoring, incident response, upgrades, and documentation.

What you'd actually do

  1. Act as a Qualys SME within a team of Qualys platform engineers, collectively supporting and advancing VMDR and Policy Compliance capabilities.
  2. Administer, configure, and optimize Qualys VMDR, Cloud Agents, and scanner operations across Windows and Linux environments.
  3. Ensure reliable asset coverage, agent health, scan performance, and data quality.
  4. Analyze vulnerability and compliance findings and partner with infrastructure, application, and security teams to drive timely remediation.
  5. Contribute to automation and integrations using Qualys APIs and scripting (Python, PowerShell, Bash).

Skills

Required

  • 5+ years of IT security or systems engineering experience
  • 3+ years focused on Qualys platform engineering
  • Qualys VMDR
  • Cloud Agent deployment
  • Policy Compliance
  • vulnerability management lifecycle
  • Windows and Linux/Unix systems knowledge
  • network-based and authenticated scanning
  • automation
  • scripting
  • Qualys APIs
  • integrations with ServiceNow
  • troubleshooting
  • analytical skills
  • communication skills

Nice to have

  • scaled vulnerability management programs
  • shared-service security platforms
  • Qualys or security certifications
  • NetBrain
  • Aqua
  • asset/CMDB platforms

What the JD emphasized

  • Qualys platform engineering
  • Qualys VMDR
  • Cloud Agent deployment
  • Policy Compliance
  • automation
  • Qualys APIs
  • scripting (Python, PowerShell, Bash)