Qualys

Senior Security QA Engineer, Cloud

Qualys pune, Maharashtra, India

Computer and Network Security · 1,001-5,000 employees

2 d ago
qa Senior (5-10 yrs) Full-time India
Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

About the role

Develop and maintain automated test suites for cloud security, APIs, and infrastructure across multi-cloud environments. Collaborate with cross-functional teams to integrate security and compliance testing into CI/CD pipelines using AI-assisted tools.

What they look for

Python Java Bash REST APIs Cloud Security Kubernetes AWS Azure GCP CI/CD Jenkins Infrastructure as Code Security Testing Compliance Testing Generative AI Automation Frameworks

Requirements

Requires strong experience in automation-first testing, cloud security configurations, and proficiency in languages like Python and Java. Candidates should have a solid understanding of security standards such as NIST, PCI-DSS, and MITRE ATT&CK.

Full description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

As a Senior Security QA Engineer, you will be part of an engineering team responsible for designing, developing, and delivering automated testing solutions for cloud security. The role combines QA automation, cloud security, API testing, compliance testing, and infrastructure automation.

You will be responsible for building robust automated test frameworks to validate cloud platforms, SaaS applications, Kubernetes environments, APIs, security controls, compliance signatures, and AI-driven security capabilities. You will work across AWS, Azure, GCP, and Oracle Cloud while ensuring product functionality, security, reliability, scalability, and compliance.

The role requires strong analytical and problem-solving skills, with an emphasis on automation-first testing, API validation, continuous testing, security testing, and AI-assisted quality engineering.

Responsibilities:

  • Develop and maintain automated functional, API, regression, integration, security, and end-to-end test suites.
  • Build automation using Python, Java, Bash/Shell, REST APIs, and automation frameworks.
  • Validate cloud security configurations, compliance signatures, and security policies across multi-cloud environments.
  • Automate testing for AWS, Azure, GCP, Kubernetes, containers, microservices, and IaC.
  • Integrate automated tests into CI/CD pipelines using Jenkins, or similar tools.
  • Leverage Generative AI and AI-assisted tools for test-case generation, code creation, test-data generation, log analysis, defect investigation, documentation, and productivity improvement.
  • Perform security and compliance testing against CIS, NIST, PCI-DSS, DISA/STIG, CSA-CCM, and MITRE ATT&CK.
  • Collaborate with development, security, DevOps, and product teams to improve quality, automation coverage, and release efficiency.

Additional Plus Competencies:

  • Security Certifications like CEH, CISA, CISM, CISSP, ISC2-CCSP
  • Cloud platform-based certifications like AWS/Azure/GCP Certified Developer/Solution Architect
  • Exposure to Security benchmarks like the CIS, SCCM, DISA, and STIG
  • Basic understanding of security standards/mandates like CSA-CCM, NIST, PCI-DSS, MITRE, etc.

Similar roles