Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
You will be acting as a subject matter expert to implement various automated and manual techniques and detailed penetration testing procedures that will cover all aspects of application security. You will apply your web security and penetration testing experience to thoroughly analyze our Qualys cloud platform for security vulnerabilities. You will work closely with our development teams to define the application security best practices, perform software architecture and design reviews, conduct black box and white box security testing, and support the identification, interpretation, and remediation of vulnerabilities across Qualys platform.
Responsibilities:
- Serve as the domain expert to assess web applications for security risks
- Perform manual and automated scanning and security analysis QualysGuard platform to find web application vulnerabilities
- Lead ethical hacking and penetration testing sessions and remediation efforts
- Work with engineering teams during application development process to adopt secure design and coding practices
- Develop and extend tools that support investigation and improve web application security posture
- Collaborate with other security and product experts in Qualys to add new capabilities to QualysGuard product suite.
Education : Bachelors/Masters degree in Engineering, Information Security, Information Assurance, Network Security or related field
Experience: Minimum 5 years of strong application security experience with thorough understanding of web application vulnerabilities.
Candidate should have exposure toward AI Appplication penetration testing (Not use of AI alone) and Agentic Implemenation for Security assessment.
Source Code Review / SAST either Manual of Automated is must.A passion for ethical hacking and vulnerability research
Knowledge of secure coding principles and practices for web applications
Hands-on experience with application security assessment methodologies and tools
Knowledge of cloud-based infrastructure and how it affect security implementations
Excellent problem solving and analytical skills; outstanding oral and written communication skills
Self-motivation and the ability to work under minimal supervision are a must
Programming knowledge - PHP, Java, Python, or Go
Skills Required
- Bachelor's or Master's degree in Engineering, Information Security, Information Assurance, Network Security or related field
- Minimum 5 years of application security experience with web application vulnerability expertise
- Experience with ethical hacking and penetration testing (manual and automated)
- Source code review / SAST experience (manual or automated)
- Programming knowledge in PHP, Java, Python, or Go
- Hands-on experience with application security assessment methodologies and tools
- Experience using Qualys/QualysGuard platform for security scanning and analysis
- Exposure to AI application penetration testing and agentic implementations for security assessment
- Knowledge of secure coding principles and web application secure design
- Knowledge of cloud-based infrastructure and its security implications
- Strong problem solving, analytical, oral and written communication skills
- Self-motivation and ability to work with minimal supervision
Qualys Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Qualys and has not been reviewed or approved by Qualys.
-
Affordable Benefits — Benefits costs are widely viewed as low for employees and dependents, with healthcare often described as almost fully paid for. Feedback suggests this affordability helps offset perceptions of lower base pay in some roles.
-
Healthcare Strength — Healthcare offerings are broad, including multiple medical plan options, dental and vision coverage, mental health support, and disability insurance. Benefits are described as “pretty amazing” or “great,” reinforcing perceived quality and coverage depth.
-
Equity Value & Accessibility — Equity participation is accessible through company stock plans and an employee stock purchase plan. Compensation packages commonly include equity alongside salary and bonus, which some consider a meaningful part of total rewards.
Qualys Insights
What We Do
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com
