Expert Vulnerability Management & SOC Support (Qualys & ServiceNow)

Project overview

For our existing customer in the insurance industry, we are looking for an experienced expert in the field of Vulnerability Management, starting immediately.

The internal Security Operations Center (SOC) operates its vulnerability management based on Qualys VMDR and ServiceNow Exposure Management. To achieve the ambitious goals by the end of the year, we are looking for hands-on technical expertise. You will support the team as a hands-on expert in optimizing scan coverage, technical vulnerability assessment, and the automation of processes and routing rules.

Responsibilities

Our Requirements

• Optimization of network scans: Checking, error analysis, and adjustment of authenticated Qualys scans (Windows/Linux) as well as the interaction of scanner appliances and cloud agents.
• Technical vulnerability analysis: Analysis and assessment of vulnerabilities (QIDs, CVEs) on servers, in containers, and cloud environments (AWS EC2) based on criticality and exploitability.
• ServiceNow & VIT Lifecycle: Development, testing, and optimization of assignment and routing rules for the correct assignment of Vulnerable Items (VITs & CVITs).
• Interface & Data Optimization: Error analysis and resolution of problems in the Qualys-ServiceNow integration (synchronization jobs, CMDB CI/Asset assignments, cleanup of historical data).
• Process Improvement: Further development of operational vulnerability response processes (e.g., Watch Topics, Remediation Tasks, Worklists) to reduce manual effort.
• Documentation: Recording configuration changes, test results, and structured handover to the SOC team.
• Demonstrable, deep hands-on experience with Qualys VMDR (Scan Profiles, Cloud Agents, error analysis for authentications).
• Very good knowledge of ServiceNow (especially Exposure Management / Vulnerability Response, Assignment Rules, and CMDB structures).
• Sound technical know-how in handling Windows and Linux server environments.
• Experience in analyzing vulnerabilities in modern infrastructures (container workloads, AWS EC2 instances).
• Analytical skills for resolving interface errors between vulnerability scanners and ITSM platforms.
• A structured, solution-oriented approach with a clear focus on testable and documented results.

Project details

• Start: Immediately
• End: 12/31/2026
• Scope: 30 person-days (PD) in the specified period
• Location: Hannover & Remote possible (initial onboarding and hardware pickup on-site)
• Start: ab sofort
• Duration: 1 Monat
• Remote: hybrid
• Location: Hannover, Deutschland, DE
• Languages: German