Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Qualys is looking for a Lead QA Engineer to own quality for products in the Cybersecurity and Compliance domain used by thousands of enterprise customers.
You will act as a senior individual contributor and technical mentor for QA and automation engineers. You will define the test strategy across UI, backend, and data pipelines, and drive the move toward AI-assisted, self-healing automation. This is a hands-on technical role: you set quality direction, influence release decisions, and actively write and review framework code. Candidates who have built or meaningfully enhanced AI-based self-healing automation tools will stand out.
Responsibilities
QA Mentorship & Strategy
- Mentor and guide QA and automation engineers through technical coaching, code reviews, and knowledge sharing.
- Define and own the end-to-end test strategy for legacy components by improving automation coverage, while ensuring all new components are fully automated from the start.
- Act as the quality voice in sprint planning, design reviews, and release readiness; make data-backed go/no-go recommendations.
- Establish scalable QA processes: defect triage, severity/priority standards, regression tiers, test case management, and root-cause analysis for escaped defects.
- Track and report quality metrics (defect leakage, automation coverage, flaky-test rate, mean time to detect, release cycle time) to engineering and product leadership.
- Partner closely with Development, Product, Support, and Sustenance teams to shift quality left and reduce customer-reported issues.
Test Automation (Hands-On)
- Architect and evolve automation frameworks across React/TypeScript front ends, Java/Spring Boot microservices, REST APIs, and Kafka-based pipelines.
- Own API and contract testing (REST Assured, Pact, Postman/Newman) covering OAuth2, JWT, token, and Basic auth flows, pagination, throttling, and vendor error handling.
- Own CI/CD quality gates in Jenkins or GitHub Actions with fast PR-level feedback and tiered regression runs.
AI-Driven & Self-Healing Automation
- Lead the design and rollout of self-healing automation: automatic locator recovery, DOM-similarity scoring, element fingerprinting, and confidence-based fallback that keeps suites green through UI changes.
- Apply LLMs across the QA lifecycle — generating test cases from requirements and API specs, converting manual tests to automated scripts, summarizing failures, and suggesting root causes from logs.
- Build intelligent flaky-test detection, failure classification, and auto-quarantine to separate real regressions from environmental noise.
- Set guardrails for AI use in QA — validating AI-generated tests, measuring healing accuracy, and preventing false passes.
Qualifications
Experience
- 8-10+ years in QA / test engineering, with at least 2 years leading or mentoring a QA team.
- Proven track record of building automation frameworks from scratch and owning release quality for a SaaS product.
- Hands-on experience building, extending, or productionizing an AI-based or self-healing automation solution, with the ability to explain how you measured its impact.
Skills
Automation & Testing
- Robot, Playwright and/or Selenium 4; TestNG or JUnit 5; Cypress, Jest, or Vitest
- API automation: REST Assured, Postman/Newman, schema validation
- Contract testing (Pact), service virtualization, and mocking (WireMock or similar)
- Performance testing with JMeter, k6, or Gatling
- Visual regression and accessibility testing
Programming & Backend
- Python, Java(17+) and JavaScript/TypeScript
- SQL and data validation on Oracle or similar
- Familiarity with microservices, Spring Boot, and Kafka (or other event streaming systems)
AI in QA
- Self-healing locator strategies and intelligent element matching
- LLM integration: prompt design, structured outputs, and embedding model calls into test tooling
- AI-assisted test generation, failure clustering, and log/trace summarization
- Familiarity with RAG or vector search over test artifacts is a plus
- Working knowledge of AI testing platforms (Healenium, Applitools, mabl, Testim)
DevOps & Tooling
- CI/CD with Jenkins or GitHub Actions
- Docker and Kubernetes fundamentals
- Test management (Jira/Xray, TestRail, or Zephyr)
- Observability tools (Grafana, Prometheus, ELK) for test and pipeline diagnostics
Technical Mentorship
- Strong ability to mentor engineers through technical guidance and code reviews
- Clear communication with engineering, product, and leadership stakeholders
- Data-driven decision-making on quality and release readiness
Preferred
- Background in cybersecurity — vulnerability management, Policy Compliance
- Experience testing multi-tenant SaaS at large data volumes.
- Open-source contributions to testing or automation projects.
Skills Required
- 8-10+ years of experience in QA or test engineering
- At least 2 years leading or mentoring a QA team
- Experience building automation frameworks from scratch
- Experience owning release quality for a SaaS product
- Production experience building, extending, or implementing AI-based or self-healing automation
- Ability to measure the impact of AI-based or self-healing automation
- Experience with Robot Framework, Playwright, or Selenium 4
- Experience with TestNG or JUnit 5
- Experience with Cypress, Jest, or Vitest
- API automation experience with REST Assured, Postman/Newman, and schema validation
- Contract testing, service virtualization, and mocking experience
- Performance testing experience with JMeter, k6, or Gatling
- Experience with visual regression and accessibility testing
- Programming experience with Python, Java 17+, and JavaScript/TypeScript
- SQL and data validation experience with Oracle or similar databases
- Familiarity with microservices, Spring Boot, and Kafka or other event streaming systems
- Experience with self-healing locator strategies and intelligent element matching
- Experience integrating LLMs into test tooling, including prompt design and structured outputs
- Experience with AI-assisted test generation, failure clustering, and log or trace summarization
- CI/CD experience with Jenkins or GitHub Actions
- Docker and Kubernetes fundamentals
- Experience with test management tools such as Jira/Xray, TestRail, or Zephyr
- Experience with observability tools such as Grafana, Prometheus, or ELK
- Strong technical mentorship, communication, code review, and data-driven decision-making skills
- Familiarity with RAG or vector search over test artifacts
- Working knowledge of Healenium, Applitools, mabl, or Testim
- Background in cybersecurity, vulnerability management, or policy compliance
- Experience testing multi-tenant SaaS at large data volumes
- Open-source contributions to testing or automation projects
Qualys Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Qualys and has not been reviewed or approved by Qualys.
-
Affordable Benefits — Benefits costs are widely viewed as low for employees and dependents, with healthcare often described as almost fully paid for. Feedback suggests this affordability helps offset perceptions of lower base pay in some roles.
-
Healthcare Strength — Healthcare offerings are broad, including multiple medical plan options, dental and vision coverage, mental health support, and disability insurance. Benefits are described as “pretty amazing” or “great,” reinforcing perceived quality and coverage depth.
-
Equity Value & Accessibility — Equity participation is accessible through company stock plans and an employee stock purchase plan. Compensation packages commonly include equity alongside salary and bonus, which some consider a meaningful part of total rewards.
Qualys Insights
What We Do
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com
