Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Security and Compliance QA Engineer
Job Description
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
As a Security and Compliance QA Engineer, you will be part of a highly motivated engineering team that is responsible for ensuring the quality of our Qualys Policy Audit product and its functionality. In this role, you will be applying your QA experience to thoroughly test (end to end) our cutting-edge products.
Responsibilities:
- Research and analyze the requirements and cater test cases to identify non-compliant OS security settings in the areas of Unix/Linux, Windows, and Application Software that will be processed by the Qualys engine to collect data from target machines that are being audited.
- Understanding and hands-on experience of Hardening and Configuration of Operating Systems like Windows, Unix/Linux, Mac OS, etc., and Application software such as Apache Http Server, Tomcat Server, and Microsoft IIS.
- Creating and executing functional/NF test procedures and/or scripts either manually or by automated tools. Tracks and reports on the test execution in a timely manner with attention given to achieving a high level of quality.
- Gathers and documents the outcome of test executions and all information needed to support ongoing measurements and reporting on risks, defects, tests, and coverage. Ensures that data is accurate, timely, and objective.
- Reports discrepancies and analyzes them to determine the root causes. Evaluates script failures at a high level.
- Coordinates with Development and Infra teams/peers on the resolution of issues, overseeing the testing progress and ensuring that high standards of quality are being met.
- Compares and analyzes system behavior vs. expected results/KPIs based on business and technical requirements. Identifies issues, proposes system improvements, and performs repetitive test execution to resolve identified issues.
- Contributes to the design of test scenarios and performs peer reviews of test cases.
- Evaluates test exit criteria to assess if additional tests are required or if test scenarios need to be adjusted.
- Participates in and contributes to internal design reviews of testing materials.
Qualifications:
- Minimum 2-4 years’ experience in QA organization and experience with the entire software development life cycle.
- Must have a good understanding of security policies and software configuration for confirming with security policies.
- Experience with Unix/Linux, Windows OS Application Software, and Network Devices in a productive environment and with configuring, hardening, and securing different Linux, Unix as well as Windows operating systems. System administration skills.
- Strong understanding of HTTP(S), TCP/IP, SSH, and SSHD protocols.
- Proficient in Shell and Python or any scripting language and must be an expert with bash scripting.
- Proficient in Regular Expressions and Programming methods.
- Understanding of relational databases, SQL, and XML.
- Knowledge of programming in the Unix/Linux/Windows environment.
- History of working with source control (SVN) and bug tracking tools (JIRA), API, and Automation tool like Zypher.
- Good communication skills.
Additional Skills Desired:
- Understanding of Center of Internet Security (CIS) benchmarks.
- Good understanding and hands-on experience with Linux/Unix Servers and commands.
- Ability to create Test Plans.
- Perform RCA (Root Cause Analysis).
- Exposure to Security benchmarks like CIS or SCCM, DISA, and STIG.
- Experience with desktop and server compliance assessment.
- TCP/IP and networking knowledge with troubleshooting.
- Knowledge of Security techniques.
- System admin work experience.
- Experience using popular LLM platforms (e.g., ChatGPT, Claude, Gemini) to optimize QA testing workflows.
Location: Pune
Key Details
- Job Function: Quality / Process Control
- Industry: IT-Software
- Specialization: Quality Inspection
- Graduate Courses: BE/ B.Tech (Engineering)
- Employment Type: Full-time
- Job Type: Onsite
- Gender: No Preference
Top Skills
What We Do
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.
The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com
