jobapplier

Senior Security Research Engineer

Qualys

Skills

Required

  • Python
  • REST APIs
  • JSON
  • scripting
  • AWS
  • Azure
  • GCP security configurations
  • IAM
  • networking
  • cloud services
  • Terraform
  • Infrastructure as Code IaC
  • security assessment
  • Kubernetes

Preferred

  • security research
  • AI-driven code generation
  • automated testing
  • human-in-the-loop workflows
  • CCSP / CISSP / GCP
  • cloud security compliance
  • APIs
  • JSON processing
  • cloud provider configurations

We are looking for Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing, and maintenance across AWS, Azure, GCP, Kubernetes, and SaaS platforms for Qualys products.

About Qualys

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Responsibilities

  • Research, develop, and maintain cloud security compliance signatures using APIs, Python, JSON processing, and cloud provider configurations.
  • Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping, and validation.
  • Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.
  • Track cloud provider updates and assess their impact on existing signatures and compliance checks.
  • Develop automated testing and validation frameworks to ensure signature accuracy and reliability.
  • Map security controls to industry benchmarks, including CIS, NIST, ISO 27001, and PCI-DSS.
  • Collaborate with security research and engineering teams to deliver scalable automation solutions.

Requirements

  • Qualifications Hands-on development experience of 3 to 6 years with Python, REST APIs, JSON, and scripting.
  • Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.
  • Knowledge of Terraform, Infrastructure as Code (IaC), and security assessment of cloud infrastructure configurations.
  • Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.
  • Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.
  • Knowledge of security benchmarks such as CIS and NIST.
  • Strong analytical, debugging, and problem-solving skills.

Preferred

  • Exposure to AI-driven code generation, automated testing, and human-in-the-loop workflows.
  • Security or cloud certifications such as CCSP, CISSP, or AWS/Azure/GCP certifications.

Every job at Qualys