jobapplier

Security Engineer , Cloud

Qualys

We are looking for Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing, and maintenance across AWS, Azure, GCP, Kubernetes, and SaaS platforms for Qualys products.

About Qualys

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Responsibilities

  • Research, develop, and maintain cloud security compliance signatures using APIs, Python, JSON processing, and cloud provider configurations.
  • Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping, and validation.
  • Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.
  • Track cloud provider updates and assess their impact on existing signatures and compliance checks.
  • Develop automated testing and validation frameworks to ensure signature accuracy and reliability.
  • Map security controls to industry benchmarks, including CIS, NIST, ISO 27001, and PCI-DSS.
  • Collaborate with security research and engineering teams to deliver scalable automation solutions.

Requirements

  • Qualifications Hands-on development experience with Python, REST APIs, JSON, and scripting.
  • Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.
  • Knowledge of Terraform, Infrastructure as Code (IaC), and security assessment of cloud infrastructure configurations.
  • Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.
  • Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.
  • Knowledge of security benchmarks such as CIS and NIST.
  • Strong analytical, debugging, and problem-solving skills.

Preferred

  • Exposure to AI-driven code generation, automated testing, and human-in-the-loop workflows.
  • Security or cloud certifications such as CCSP, CISSP, or AWS/Azure/GCP certifications.