Senior Security Research Engineer

Qualys pune, Maharashtra, India

Computer and Network Security · 1,001-5,000 employees

3 d ago

Senior (5-10 yrs) Full-time India

Create a free account to apply — email only, no card. You can also save this posting or score it against your profile with AI.

Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.

About the role

Research, develop, test, and maintain cloud security compliance signatures and AI-driven automation across cloud, Kubernetes, and SaaS platforms. Assess cloud risks and provider updates, map controls to industry benchmarks, and collaborate with research and engineering teams to deliver scalable solutions.

What they look for

Python REST APIs JSON Processing Cloud Security AWS Azure Google Cloud Platform Terraform Infrastructure as Code Agentic AI Large Language Models Prompt Engineering Kubernetes Security Cloud Security Compliance Automated Testing Security Research

Requirements

Requires 3–6 years of hands-on development experience with Python, REST APIs, JSON, and scripting, along with knowledge of cloud security configurations and Infrastructure as Code. Candidates should understand Agentic AI and LLM workflows, cloud security assessment, Kubernetes security, and benchmarks such as CIS and NIST.

Full description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

We are looking for Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing, and maintenance across AWS, Azure, GCP, Kubernetes, and SaaS platforms for Qualys products.

Key Responsibilities

Research, develop, and maintain cloud security compliance signatures using APIs, Python, JSON processing, and cloud provider configurations.
Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping, and validation.
Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.
Track cloud provider updates and assess their impact on existing signatures and compliance checks.
Develop automated testing and validation frameworks to ensure signature accuracy and reliability.
Map security controls to industry benchmarks, including CIS, NIST, ISO 27001, and PCI-DSS.
Collaborate with security research and engineering teams to deliver scalable automation solutions.

Required Qualifications

Hands-on development experience of 3 to 6 years with Python, REST APIs, JSON, and scripting.
Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.
Knowledge of Terraform, Infrastructure as Code (IaC), and security assessment of cloud infrastructure configurations.
Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.
Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.
Knowledge of security benchmarks such as CIS and NIST.
Strong analytical, debugging, and problem-solving skills.

Good to Have

Exposure to AI-driven code generation, automated testing, and human-in-the-loop workflows.
Security or cloud certifications such as CCSP, CISSP, or AWS/Azure/GCP certifications.