Vulnerability Management Specialist (Qualys & Nessus)

About the role

FORFIRM is expanding its Cybersecurity practice and seeks a Vulnerability Management Specialist with hands‑on experience in Qualys and Tenable Nessus. You will own the full vulnerability management lifecycle, working closely with technical teams and business stakeholders to reduce risk and strengthen the security posture of enterprise environments.

Key responsibilities

• Plan, configure and run vulnerability scans with Qualys and Nessus across networks, servers, endpoints, applications and cloud environments.
• Analyze scan results, eliminate false positives, prioritize findings using CVSS and business context, and define remediation plans with IT teams.
• Produce technical and executive reports with KPIs and risk trends for management and clients.
• Maintain scan templates, asset inventories, policies and operating procedures; support audits and compliance assessments (ISO 27001, NIS2, GDPR).

Required profile

• Minimum 3 years of hands‑on experience in vulnerability management or security operations.
• Strong practical knowledge of Qualys (VMDR, Cloud Agent) and Nessus.
• Solid understanding of networking (TCP/IP, firewalls, segmentation) and Windows/Linux systems.
• Experience communicating risk to both technical and business audiences.

Required skills

• Qualys, Tenable Nessus
• TCP/IP, firewalls, network segmentation
• Windows and Linux operating systems
• CVSS, MITRE ATT&CK, OWASP, CIS Benchmarks
• Python, PowerShell, Bash scripting