IT Security Specialist - Qualys (Hybrid, Houston or Dallas TX)

Company Description

Work with Us. Change the World.

At AECOM, we're delivering a better world. Whether improving your commute, keeping the lights on, providing access to clean water, or transforming skylines, our work helps people and communities thrive. We are the world's trusted infrastructure consulting firm, partnering with clients to solve the world’s most complex challenges and build legacies for future generations.

There has never been a better time to be at AECOM. With accelerating infrastructure investment worldwide, our services are in great demand. We invite you to bring your bold ideas and big dreams and become part of a global team of over 50,000 planners, designers, engineers, scientists, digital innovators, program and construction managers and other professionals delivering projects that create a positive and tangible impact around the world.

We're one global team driven by our common purpose to deliver a better world. Join us.

Job Description

We are seeking a skilled and motivated IT Security Specialist with hands-on experience in Qualys and a strong background in network security, vulnerability management, and risk assessment. As a midlevel member of our security team, you will help protect our organization’s critical infrastructure, implement and maintain security solutions, and support the overall security strategy. The ideal candidate will have a solid understanding of security best practices and experience using Qualys for vulnerability scanning and remediation.

This position will offer flexibility for hybrid work schedules to include a combination of both in-office presence and telecommute/virtual, and will be based in either Dallas or Houston, TX.

Key Responsibilities:

• Manage and configure Qualys vulnerability scanning and reporting tools.
• Conduct vulnerability assessments, analyze scan results, and recommend corrective actions.
• Coordinate with various teams to remediate vulnerabilities and maintain security posture.
• Support risk assessments, penetration testing, and audits.
• Act as primary contact for managed service vendor
• Collaborate with cross-functional, global teams to develop and implement security policies and procedures.
• Collaborate with other IT departments to ensure that security tools and solutions are fully integrated across the environment.
• Stay up to date with emerging security trends and technologies, particularly in vulnerability management and patching.

Qualifications

Minimum Requirements:

• BA/BS plus at least 4 years of experience in IT security or a related field, or demonstrated equivalency of experience and/or education (AS degree plus at least 6 years of related experience OR High school diploma plus at least 8 years of related experience)
• Hands-on experience with Qualys vulnerability management, patch management, and security assessment solutions.
• Solid understanding of security best practices, risk management, and threat landscape.
• Ability to work independently and as part of a team.
• Experience with security frameworks such as NIST, CIS, ISO 27001, or PCI DSS.

Preferred Qualifications:

• Operational experience supporting IT infrastructure
• Knowledge of security tools and platforms such as antivirus, endpoint detection and response (EDR).
• Familiarity with network security protocols, firewalls, IDS/IPS, VPNs, and endpoint security solutions.
• Experience with cloud security solutions (AWS, Azure, Google Cloud).
• Relevant certifications such as CISSP, CISM, CEH, CompTIA Security+, or similar.
• Strong analytical, problem-solving, and communication skills.

Additional Information

• Sponsorship for US work authorization is not available for this position, now or in the future
• Relocation assistance is not available for this position

About AECOM

AECOM is proud to offer comprehensive benefits to meet the diverse needs of our employees. Depending on your employment status, AECOM benefits may include medical, dental, vision, life, AD&D, disability benefits, paid time off, leaves of absences, voluntary benefits, perks, well-being resources, employee assistance program, business travel insurance, service recognition awards, retirement savings plan, and employee stock purchase plan.

AECOM is the world’s trusted infrastructure consulting firm, delivering professional services throughout the project lifecycle – from advisory, planning, design and engineering to program and construction management. On projects spanning transportation, buildings, water, new energy and the environment, our public- and private-sector clients trust us to solve their most complex challenges. Our teams are d