Qualys Reporting Risk Visibility Analyst Hybrid Houston or Dallas TX

Qualys Reporting & Risk Visibility Analyst - Hybrid (Houston or Dallas TX) Full-time State/Province: Texas Business Group: Corporate Legal Entity: AECOM Business Line: Corporate Work Location Model: Hybrid Operating Group: Corporate Primary Location: US - Houston, TX Compensation: USD 130,000 - USD 175,000 yearly This role focuses on reporting and External Attack Surface Management supporting the Qualys platform including EASM, CSAM and VMDR to provide accurate visibility, actionable insights and high‑quality reporting for effective vulnerability remediation. This is a senior individual‑contributor role requiring deep technical expertise, sound judgment and the ability to operate independently while influencing outcomes across Cybersecurity, IT and executive stakeholders. This position offers hybrid work schedules, including in‑office presence and telecommute, based in either Houston or Dallas, TX. Key Responsibilities Serve as a subject‑matter expert for Qualys reporting and risk visibility, providing guidance and support to Cybersecurity, IT Infrastructure, and Executive stakeholders. Partner with infrastructure, cloud, and application teams to support remediation efforts by providing accurate data, context, and reporting from the Qualys platform. Develop, maintain, and deliver clear, audience‑specific reports and dashboards for IT Infrastructure teams, Software Governance, Cybersecurity teams, IT leadership and Executive leadership. Support and optimize Qualys EASM and CSAM to provide accurate visibility into the organization’s external attack surface, including identifying, analyzing, and prioritizing externally exposed vulnerabilities and risks. Support and maintain Qualys integrations with ServiceNow to enable accurate vulnerability intake, workflow routing, remediation tracking and reporting. Serve as secondary support for Qualys platform operations, backing up another Cybersecurity Engineering resource, assisting with VMDR configuration, integrations, upgrades and troubleshooting. Expand Qualys reporting and risk‑visibility capabilities over time to support additional modules (e.g., TotalCloud, TotalAppSec, and Software Composition Analysis (SCA)) as organizational needs and platform maturity evolve. Drive continuous improvements to processes, environments and overall security posture, ensuring operational efficiency and risk reduction. Qualifications Bachelor’s degree (BA/BS) and at least 6 years of experience in cybersecurity, IT security or a related field, or demonstrated equivalency of experience and/or education. Hands‑on experience supporting Qualys in an enterprise environment, specifically EASM, CSAM and VMDR. Strong experience with vulnerability data analysis, reporting and remediation support. Demonstrated ability to translate technical data into clear, actionable insights for varied audiences. Strong analytical, problem‑solving, and communication skills. Ability to work independently while collaborating effectively across cross‑functional teams. Preferred Qualifications Qualys certifications (e.g., Qualys EASM Specialist, Qualys VMDR Specialist). Experience with, or demonstrated interest in, expanding into additional Qualys modules such as TotalCloud, TotalAppSec, or SCA. Direct experience supporting IT infrastructure teams (e.g., server, network, cloud or platform operations). Broader cybersecurity experience outside of vulnerability management. Experience integrating Qualys with ServiceNow (e.g., vulnerability intake, ticket creation, workflow automation, or reporting). Industry certifications such as CISSP, CEH, CompTIA Security+ or equivalent. Sponsorship for US work authorization is not available for this position, now or in the future. Relocation assistance is not available for this position. Equal Opportunity Employer As an Equal Opportunity Employer, we believe in your potential and are here to help you achieve it. All your information will be kept confidential according to EEO guidelines. #J-18808-Ljbffr AECOM