Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
As a Senior Security QA Engineer, you will be part of an engineering team responsible for designing, developing, and delivering automated testing solutions for cloud security. The role combines QA automation, cloud security, API testing, compliance testing, and infrastructure automation.
You will be responsible for building robust automated test frameworks to validate cloud platforms, SaaS applications, Kubernetes environments, APIs, security controls, compliance signatures, and AI-driven security capabilities. You will work across AWS, Azure, GCP, and Oracle Cloud while ensuring product functionality, security, reliability, scalability, and compliance.
The role requires strong analytical and problem-solving skills, with an emphasis on automation-first testing, API validation, continuous testing, security testing, and AI-assisted quality engineering.
Responsibilities:
- Develop and maintain automated functional, API, regression, integration, security, and end-to-end test suites.
- Build automation using Python, Java, Bash/Shell, REST APIs, and automation frameworks.
- Validate cloud security configurations, compliance signatures, and security policies across multi-cloud environments.
- Automate testing for AWS, Azure, GCP, Kubernetes, containers, microservices, and IaC.
- Integrate automated tests into CI/CD pipelines using Jenkins, or similar tools.
- Leverage Generative AI and AI-assisted tools for test-case generation, code creation, test-data generation, log analysis, defect investigation, documentation, and productivity improvement.
- Perform security and compliance testing against CIS, NIST, PCI-DSS, DISA/STIG, CSA-CCM, and MITRE ATT&CK.
- Collaborate with development, security, DevOps, and product teams to improve quality, automation coverage, and release efficiency.
Additional Plus Competencies:
- Security Certifications like CEH, CISA, CISM, CISSP, ISC2-CCSP
- Cloud platform-based certifications like AWS/Azure/GCP Certified Developer/Solution Architect
- Exposure to Security benchmarks like the CIS, SCCM, DISA, and STIG
- Basic understanding of security standards/mandates like CSA-CCM, NIST, PCI-DSS, MITRE, etc.
Skills Required
- Experience developing automated functional, API, regression, integration, security, and end-to-end test suites
- Proficiency with Python, Java, Bash or Shell, REST APIs, and automation frameworks
- Experience testing cloud platforms, SaaS applications, Kubernetes environments, APIs, security controls, and compliance signatures
- Experience with AWS, Azure, GCP, Oracle Cloud, Kubernetes, containers, microservices, and infrastructure as code
- Experience integrating automated tests into CI/CD pipelines using Jenkins or similar tools
- Knowledge of cloud security, security testing, compliance testing, and automation-first quality engineering
- Security certifications such as CEH, CISA, CISM, CISSP, or ISC2-CCSP
- Cloud certifications such as AWS, Azure, or GCP Developer or Solutions Architect
- Exposure to CIS, SCCM, DISA, and STIG security benchmarks
- Understanding of CSA-CCM, NIST, PCI-DSS, and MITRE security standards or mandates
Qualys Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Qualys and has not been reviewed or approved by Qualys.
-
Affordable Benefits — Benefits costs are widely viewed as low for employees and dependents, with healthcare often described as almost fully paid for. Feedback suggests this affordability helps offset perceptions of lower base pay in some roles.
-
Healthcare Strength — Healthcare offerings are broad, including multiple medical plan options, dental and vision coverage, mental health support, and disability insurance. Benefits are described as “pretty amazing” or “great,” reinforcing perceived quality and coverage depth.
-
Equity Value & Accessibility — Equity participation is accessible through company stock plans and an employee stock purchase plan. Compensation packages commonly include equity alongside salary and bonus, which some consider a meaningful part of total rewards.
Qualys Insights
What We Do
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com
