Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
We are looking for Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing, and maintenance across AWS, Azure, GCP, Kubernetes, and SaaS platforms for Qualys products.
Key Responsibilities
- Research, develop, and maintain cloud security compliance signatures using APIs, Python, JSON processing, and cloud provider configurations.
- Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping, and validation.
- Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.
- Track cloud provider updates and assess their impact on existing signatures and compliance checks.
- Develop automated testing and validation frameworks to ensure signature accuracy and reliability.
- Map security controls to industry benchmarks, including CIS, NIST, ISO 27001, and PCI-DSS.
- Collaborate with security research and engineering teams to deliver scalable automation solutions.
- Hands-on development experience with Python, REST APIs, JSON, and scripting.
- Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.
- Knowledge of Terraform, Infrastructure as Code (IaC), and security assessment of cloud infrastructure configurations.
- Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.
- Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.
- Knowledge of security benchmarks such as CIS and NIST.
- Strong analytical, debugging, and problem-solving skills.
- Exposure to AI-driven code generation, automated testing, and human-in-the-loop workflows.
- Security or cloud certifications such as CCSP, CISSP, or AWS/Azure/GCP certifications.
Skills Required
- Hands-on development experience with Python, REST APIs, JSON, and scripting
- Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services
- Knowledge of Terraform, Infrastructure as Code, and cloud infrastructure configuration security assessment
- Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation
- Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices
- Knowledge of security benchmarks including CIS and NIST
- Strong analytical, debugging, and problem-solving skills
- Exposure to AI-driven code generation, automated testing, and human-in-the-loop workflows
- Security or cloud certifications such as CCSP, CISSP, or AWS, Azure, or GCP certifications
Qualys Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Qualys and has not been reviewed or approved by Qualys.
-
Affordable Benefits — Benefits costs are widely viewed as low for employees and dependents, with healthcare often described as almost fully paid for. Feedback suggests this affordability helps offset perceptions of lower base pay in some roles.
-
Healthcare Strength — Healthcare offerings are broad, including multiple medical plan options, dental and vision coverage, mental health support, and disability insurance. Benefits are described as “pretty amazing” or “great,” reinforcing perceived quality and coverage depth.
-
Equity Value & Accessibility — Equity participation is accessible through company stock plans and an employee stock purchase plan. Compensation packages commonly include equity alongside salary and bonus, which some consider a meaningful part of total rewards.
Qualys Insights
Similar Jobs
What We Do
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com
