Sen. Consultant Qualys Solution Design & IT/OT - ASAP - 3 Months + Extension - REMOTE

Project overview

For a client, we are looking for an experienced consultant to support the conception and implementation of a company-wide IT/OT Vulnerability Management initiative based on Qualys. The project focuses on expanding an existing Qualys environment, integrating vulnerability management processes into the existing security ecosystem, and managing the implementation across multiple production and data center locations.

Responsibilities

• Conception and expansion of an existing Qualys platform, including the introduction of Qualys Cloud Agents.
• Execution of a Proof of Concept (PoC) and development of a rollout strategy for multiple locations and environments.
• Development of secure scan architectures for IT and OT environments, considering network segmentation, firewall requirements, and operational availability.
• Definition of scan strategies, policies, asset groups, tagging concepts, and maintenance windows for production-critical systems.
• Development of secure scanning concepts for industrial or Operational Technology environments.
• Integration of Qualys into ServiceNow, including CMDB mapping and vulnerability management workflows.
• Coordination with internal security initiatives and adjacent security technologies to ensure a consistent overall architecture.
• Conducting workshops and collaborating with technical and business stakeholders to define the target architecture and implementation strategy.
• Responsibility for project planning, stakeholder management, reporting, risk management, and successful project execution.
• Creation of architecture and operational documentation, as well as knowledge transfer for internal security and operations teams.

Requirements

Deliverables

• Sound practical experience with Qualys VMDR and/or the Qualys Cloud Platform.
• In-depth knowledge in the areas of Qualys Cloud Agents, Scanner Appliances, Asset Tagging, Policy Compliance, and Vulnerability Scanning.
• Experience using Qualys in OT, ICS, or industrial environments.
• Understanding of industrial network architectures and the Purdue model.
• Experience with Qualys-ServiceNow integrations, especially CMDB mapping and vulnerability response processes.
• Knowledge in the areas of IT/OT network segmentation, DMZ concepts, data center infrastructures, and production environments.
• Proven experience in managing complex security or infrastructure projects.
• Strong communication and stakeholder management skills.
• Very good English and/or German language skills.
• Target architecture and solution design for a cross-site Qualys implementation.
• Documented concepts for network segmentation, scanning, tagging, policies, agents, and scanner appliances.
• Project roadmap with milestones, dependencies, risks, and resource planning.
• Design and implementation of the Qualys-ServiceNow integration.
• Operational documentation, handover documentation, and training/knowledge transfer materials.

Project details

We operate as a recruitment consultancy. None of the terms used are intended to be discriminatory with regard to age, gender or experience. We confirm that we welcome all applications from candidates of all ages, genders and experiences.

• Start: ASAP
• Utilization: 3–5 days per week
• Duration: Until the end of 2026 with an option to extend
• Language: German and/or English
• Start: ab sofort
• Duration: 3 Monate
• Remote: remote
• Location: hamburg, Deutschland, DE
• Languages: German