🚨 Hiring: Vulnerability Management Analyst – Qualys Power User | Genpact
🏢 Company: Genpact
💼 Position: Vulnerability Management Analyst – Qualys Power User
📍 Location: Any Genpact Location
🧑💻 Experience: 5+ Years
🕒 Shift: MST Shift
⚡ Joining: Immediate Joiners Preferred
🛠️ Mandatory Skill: Qualys Power User
💰 Salary: Not Specified
📩 Apply Email: nsenthil.kumar@genpact.com
📄 Job Description
Genpact is seeking an experienced Vulnerability Management Analyst – Qualys Power User to support its Threat and Vulnerability Management (TVM) operations. The role focuses on maintaining an accurate, comprehensive, and timely view of the organization's security posture.
The selected candidate will manage day-to-day operations of the Qualys platform, using capabilities such as Vulnerability Management, Detection and Response (VMDR), Cyber Security Asset Management (CSAM), and External Attack Surface Management (EASM) to identify vulnerabilities, discover unmanaged assets, and monitor external exposure.
This is an operational security role. The analyst will not be responsible for patching systems directly. Instead, the role will involve providing reliable vulnerability data to partner teams, creating and managing Jira tickets, collaborating with System Administrators and DevOps teams to prioritize remediation, and validating that identified issues have been resolved.
🎯 Key Responsibilities
- Manage daily vulnerability management operations using the Qualys platform.
- Run vulnerability scans through Qualys VMDR and analyze scan results to identify security weaknesses.
- Discover, reconcile, and maintain asset inventories using Qualys CSAM or similar asset management tools.
- Identify unmanaged assets and coverage gaps that could leave systems exposed to security risks.
- Support External Attack Surface Management (EASM) activities by reviewing DNS records, public IP ranges, and internet-facing assets.
- Identify potentially exposed assets that should not be publicly accessible and support investigation of the associated risks.
- Create, update, and manage vulnerability remediation tickets in Jira.
- Use Jira Query Language (JQL) to search for issues, track remediation progress, and create operational dashboards.
- Collaborate with System Administrators, DevOps teams, and other partner teams to prioritize and resolve vulnerabilities.
- Provide clear, actionable vulnerability information, including affected systems, risk context, and remediation priorities.
- Validate remediation by confirming that vulnerabilities have been resolved or are no longer detected.
- Troubleshoot scanning issues, including scanners being unable to reach hosts and agents appearing offline.
- Correlate external attack surface findings with internal VMDR vulnerabilities to determine actual exposure and risk.
- Apply Windows, Linux, and networking fundamentals to help partner teams understand vulnerability locations and their potential impact.
🎓 Eligibility Criteria
- Experience: Minimum 5 years of relevant professional experience.
- Mandatory Expertise: Strong hands-on operational experience as a Qualys Power User.
- Vulnerability Management: Practical experience with Qualys VMDR, including scan execution and results analysis.
- Asset Management: Experience with Qualys CSAM or similar tools for asset inventory reconciliation and coverage analysis.
- Attack Surface Management: Understanding of EASM, DNS, public IP ranges, and internet-facing assets.
- Ticketing: Strong Jira knowledge, including JQL and dashboard creation.
- Cloud Security: Cloud Security Analyst-level understanding.
- Operating Systems and Networking: Working knowledge of Windows, Linux, and networking fundamentals.
- Collaboration: Ability to build productive relationships with System Administrators, DevOps teams, and other partner teams.
- Shift: Ability to work the specified MST shift.
🛡️ Mandatory Skills
- Qualys Power User
- Qualys VMDR operations and vulnerability scan analysis
- Cloud Security Analyst-level understanding
- Vulnerability identification, prioritization, and remediation tracking
- Strong interpersonal and partner collaboration skills
- Jira ticket management and JQL
🔧 Technical Skills and Tools
1. Qualys and Vulnerability Management
- Qualys VMDR
- Qualys CSAM or equivalent asset management solutions
- Vulnerability scan execution and result analysis
- Asset inventory reconciliation
- Vulnerability validation and remediation tracking
2. External Attack Surface Management
- EASM concepts and external exposure analysis
- DNS and public IP range fundamentals
- Identification of unexpected internet-facing assets
- Correlation of external exposure with internal vulnerabilities
3. Jira and Reporting
- Jira issue and ticket management
- Jira Query Language (JQL)
- Dashboard creation and issue tracking
- Remediation status monitoring and reporting
4. Infrastructure and Cloud Security
- Windows and Linux fundamentals
- Networking fundamentals
- Cloud security concepts
- Scanner connectivity troubleshooting
- Endpoint or scanning agent troubleshooting
Additional Advantage: SIEM experience and strong analytical skills are considered a bonus.
⭐ Job Highlights
- Company: Genpact
- Role: Vulnerability Management Analyst – Qualys Power User
- Experience: 5+ Years
- Location: Any Genpact Location
- Shift: MST Shift
- Joining Preference: Immediate joiners preferred
- Core Focus: Qualys VMDR, CSAM, EASM, Jira, and vulnerability remediation coordination
- Additional Advantage: SIEM experience
- Salary: Not specified
🧠 Interview Preparation Tips
- Prepare practical examples of running Qualys VMDR scans, reviewing findings, and identifying vulnerabilities that require urgent attention.
- Understand how CSAM helps maintain an accurate asset inventory and identify unmanaged or unscanned assets.
- Review EASM fundamentals, including DNS records, public IP ranges, exposed services, and internet-facing asset discovery.
- Practise JQL queries for filtering vulnerability tickets, monitoring issue status, and building Jira dashboards.
- Prepare examples of coordinating with System Administrators and DevOps teams to prioritize vulnerability remediation.
- Understand how to validate remediation and distinguish between a fixed vulnerability, a recurring finding, and a false positive.
- Be ready to troubleshoot common scanner connectivity problems and offline agents.
- Revise Windows, Linux, networking, and cloud security fundamentals relevant to vulnerability analysis.
- Prepare an example of correlating an external attack surface finding with an internal vulnerability to assess actual risk.
- If you have SIEM experience, prepare examples of how security events or logs helped you investigate or prioritize risks.
📩 How to Apply
Interested candidates can share their updated resume with the recruitment team at the email address below.
📧 Email: nsenthil.kumar@genpact.com
Required Email Subject: Qualys – [Your Notice Period]
Include your current notice period in the email, as requested by the recruiter. Mention your relevant Qualys experience, current location, and availability to join.
📌 Job Summary
- Company: Genpact
- Job Title: Vulnerability Management Analyst – Qualys Power User
- Experience: 5+ Years
- Location: Any Genpact Location
- Shift: MST Shift
- Joining: Immediate joiners preferred
- Mandatory Skill: Qualys Power User
- Core Tools: Qualys VMDR, CSAM, EASM, Jira, JQL
- Additional Advantage: SIEM experience
- Salary: Not specified
- Apply Email: nsenthil.kumar@genpact.com