Senior Cybersecurity Analyst

Capgemini

Diegem, Belgium

YOUR ROLE

We are seeking a highly skilled and experienced Senior IT Security Consultant, specialized in Vulnerability Management, to join our team in a leading pharmaceutical company.

You will manage & configure the Qualys environment and be responsible for driving the identification and management of vulnerabilities with the VM analysts. You will drive and assist in various projects (CIS benchmarks, VM Automation, Secure configurations (ESXi, Database, MS Defender,…), firewall reviews,…)

Manage and Configure Qualys Environment:

Ensure effective vulnerability management by configuring and maintaining the Qualys environment.
Monitor and optimize vulnerability scanning processes.
Collaborate with VM Analysts.
Run and oversee the vulnerability management program & campaigns.
Ensuring timely and effective communication with IT stakeholders for patching, remediation, and lifecycle management.
Create detailed reports and dashboards to communicate effectively with stakeholders.

Drive and Assist in Various Security Projects:

Implement CIS benchmarks to enhance security posture.
Automate vulnerability management processes to streamline identification and remediation through basic scripting and API’s.
Ensure secure configurations for Windows, Linux, ESXi, databases, Microsoft Defender,...
Conduct thorough firewall reviews to validate rule sets.

YOUR PROFILE

Minimum of 5 years of experience in vulnerability management, including vulnerability assessments and penetration testing.
Proficiency in Qualys VMDR, Microsoft Defender (TVM), and BitSight.
Experience with basic scripting, API work, and automation.
Knowledge of Power BI or other dashboarding/reporting tools.
Familiarity with CIS benchmarks, secure configurations (Windows, Linux, esxi, databases, defender,...), Azure, and containers.
Familiarity with CVE, CVSS, EPSS, …
Experience with BMC Helix CMDB/ticketing system is a plus.
General cybersecurity knowledge.
Experience with common network protocols, operating systems, and application architectures.