Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Company ProfileQualys is a leading provider of cloud-based security and compliance solutions, helping organizations identify vulnerabilities, manage cyber risk, and protect their IT infrastructure.
The Module Loader is a critical component of Qualys Remote Vulnerability Detection and acts as the brain behind vulnerability assessment workflows. It plays a key role in orchestrating and executing the capabilities required to identify vulnerabilities across diverse enterprise environments and technologies.
Given its central role in vulnerability detection, the Module Loader requires a high degree of accuracy, reliability, scalability, performance, and backward compatibility. The team works on complex engineering challenges involving vulnerability detection, networking, protocols, operating systems, security technologies, and large-scale enterprise environments.
Be part of the team building and validating one of the foundational components powering Qualys vulnerability detection.
Core Responsibility
As a Senior Software QA Engineer, you will be responsible for ensuring the quality, reliability, performance, and scalability of the Module Loader and its remote vulnerability detection capabilities.
This is a hands-on technical QA/SDET role where you will own quality from requirements and design through release and production. You will work closely with developers, security researchers, Product Management, and other engineering teams to understand vulnerability detection requirements and translate them into comprehensive test strategies.
You will be expected to go beyond functional validation and understand how vulnerability detection works, identify potential gaps and edge cases, create complex test environments, automate validation, analyze failures, and troubleshoot problems across application, operating system, network, and protocol layers.
You will have end-to-end quality ownership of features, including test design, automation, functional and integration testing, performance and scalability testing, regression qualification, debugging, and production issue analysis.
Position RequirementsEligible candidates should meet the following criteria.
Required- 4+ years of hands-on experience in Software QA, SDET, or Software Testing for complex enterprise software products.
- Strong experience in testing system-level, security, networking, or distributed applications, preferably on Linux/Unix platforms.
- Strong hands-on experience with test automation using Python, Shell scripting, C/C++, or equivalent programming/scripting languages.
- Ability to independently understand complex feature requirements and technical designs and develop comprehensive test strategies, test plans, test scenarios, and automation.
- Strong understanding of Linux/Unix operating systems, processes, services, file systems, permissions, package management, and system-level troubleshooting.
- Strong knowledge of networking fundamentals and protocols, including TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, proxies, and client-server communication.
- Strong debugging and problem-solving skills with the ability to investigate failures across application, operating system, and network layers.
- Experience analyzing logs, network traffic, system behavior, application failures, CPU/memory utilization, and other diagnostic information to drive issues toward root cause.
- Experience in functional, integration, regression, negative, compatibility, upgrade, and end-to-end testing.
- Ability to identify corner cases, failure scenarios, environmental dependencies, and regression risks beyond documented requirements.
- Experience validating software across heterogeneous enterprise environments involving different operating systems, services, network configurations, and software versions.
- Experience with performance, scalability, reliability, and resiliency testing of enterprise products.
- Strong focus on an automation-first approach, with experience building maintainable and reusable automated tests and reducing repetitive manual validation.
- Experience integrating automation into CI/CD pipelines and analyzing failures to differentiate product defects, automation failures, and environmental issues.
- Strong understanding of SDLC/STLC, defect lifecycle, risk-based testing, release qualification, source control, and software engineering best practices.
- Ability to work independently with developers and other engineering teams to reproduce, debug, and drive complex product issues to closure.
- Strong analytical mindset with the ability to question assumptions and identify scenarios where expected vulnerability detection behavior may produce incorrect, incomplete, inconsistent, or unexpected results.
- Self-driven and quick learner with an interest in understanding new technologies, operating systems, protocols, applications, and security concepts.
- Excellent communication and collaboration skills with the ability to engage with different technical teams, seek clarification, challenge assumptions constructively, and build consensus.
Desirable Requirements
- Experience in the Cyber Security, Vulnerability Management, Vulnerability Assessment, or Network Security domain.
- Understanding of vulnerability detection concepts and security assessment methodologies.
- Experience testing network scanners, vulnerability scanners, security products, or other network-intensive system software.
- Good knowledge of common enterprise protocols and services.
- Knowledge of SSL/TLS, certificates, authentication mechanisms, and cryptography fundamentals.
- Experience with packet analysis and network troubleshooting tools such as Wireshark/tcpdump or equivalent tools.
- Exposure to C/C++ applications and debugging tools such as GDB.
- Experience creating and maintaining complex test environments consisting of multiple operating systems, applications, services, and network configurations.
- Exposure to containers, virtualization, and cloud infrastructure.
- Experience developing or enhancing QA automation frameworks, test infrastructure, or large-scale test environments.
Bachelor's / Master's degree in Computer Science, Computer Engineering, Information Technology, or a related technical discipline (M.E / M.Tech, B.E / B.Tech, MCA) and 4 to 6 years of relevant experience as a Senior Software QA Engineer, Software QA Engineer, SDET, Automation Engineer, Software Test Engineer, or a similar technical quality engineering role.
Skills Required
- Bachelor’s or Master’s degree in Computer Science, Computer Engineering, Information Technology, or a related technical discipline; equivalent M.E., M.Tech, B.E., B.Tech, or MCA accepted
- 4+ years of hands-on experience in Software QA, SDET, or software testing for complex enterprise software products
- Strong experience testing system-level, security, networking, or distributed applications, preferably on Linux or Unix
- Hands-on test automation experience using Python, Shell scripting, C, C++, or equivalent languages
- Ability to develop test strategies, test plans, test scenarios, and automation from complex requirements and technical designs
- Strong understanding of Linux or Unix operating systems, processes, services, file systems, permissions, package management, and troubleshooting
- Strong knowledge of TCP/IP, DNS, HTTP/HTTPS, SSL/TLS, proxies, and client-server communication
- Strong debugging, problem-solving, analytical, communication, and collaboration skills
- Experience analyzing logs, network traffic, system behavior, application failures, CPU and memory utilization, and diagnostic information
- Experience with functional, integration, regression, negative, compatibility, upgrade, and end-to-end testing
- Experience validating software across heterogeneous operating systems, services, network configurations, and software versions
- Experience with performance, scalability, reliability, and resiliency testing
- Experience integrating test automation into CI/CD pipelines and distinguishing product defects, automation failures, and environmental issues
- Understanding of SDLC, STLC, defect lifecycle, risk-based testing, release qualification, source control, and software engineering practices
- Ability to work independently with developers and engineering teams to reproduce, debug, and resolve complex product issues
- Self-driven approach and willingness to learn new technologies, operating systems, protocols, applications, and security concepts
- Experience in cybersecurity, vulnerability management, vulnerability assessment, or network security
- Understanding of vulnerability detection concepts and security assessment methodologies
- Experience testing network scanners, vulnerability scanners, security products, or network-intensive system software
- Knowledge of enterprise protocols and services, SSL/TLS, certificates, authentication, and cryptography fundamentals
- Experience with Wireshark, tcpdump, or equivalent packet-analysis and network-troubleshooting tools
- Exposure to C/C++ applications and debugging tools such as GDB
- Experience creating and maintaining complex test environments with multiple operating systems, applications, services, and network configurations
- Exposure to containers, virtualization, and cloud infrastructure
- Experience developing or enhancing QA automation frameworks, test infrastructure, or large-scale test environments
Qualys Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Qualys and has not been reviewed or approved by Qualys.
-
Affordable Benefits — Benefits costs are widely viewed as low for employees and dependents, with healthcare often described as almost fully paid for. Feedback suggests this affordability helps offset perceptions of lower base pay in some roles.
-
Healthcare Strength — Healthcare offerings are broad, including multiple medical plan options, dental and vision coverage, mental health support, and disability insurance. Benefits are described as “pretty amazing” or “great,” reinforcing perceived quality and coverage depth.
-
Equity Value & Accessibility — Equity participation is accessible through company stock plans and an employee stock purchase plan. Compensation packages commonly include equity alongside salary and bonus, which some consider a meaningful part of total rewards.
Qualys Insights
What We Do
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com







