Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Automation QA Engineer — Cloud Security Posture Management
About the role Our CSPM platform discovers cloud resources across AWS, Azure, GCP, and OCI and evaluates them against security controls and compliance benchmarks. You'll own the automation that proves those controls are correct — a control that silently misses a misconfiguration is a customer security risk, not just a bug.
What you'll do
- Design and maintain automated tests in Python (Robot Framework) and Playwright for cloud connectors, the evaluation engine, REST APIs, and UI.
- Validate control logic end-to-end — provision intentionally misconfigured cloud resources, verify controls evaluate correctly, and investigate false positives/negatives.
- Verify inventory accuracy across accounts, regions, and resource types.
- Test against real cloud API behavior — pagination, eventual consistency, throttling, and insufficient-permission cases.
- Manage test environments involving Elasticsearch/OpenSearch, Cassandra, and Kafka.
- Contribute to CI/CD pipelines (Jenkins / GitLab CI); debug failures and participate in code reviews.
- We use AI and LLM-assisted tooling for test-case generation and failure triage; you'll help shape where it's trustworthy and where it isn't.
Required
- 2+ years in Software Automation Testing.
- Strong Python and hands-on Robot Framework experience.
- Playwright or comparable UI automation experience.
- Testing SaaS applications and REST APIs.
- Working experience with at least one major cloud provider (AWS, Azure, GCP, or OCI), including its APIs and IAM model.
- Strong debugging skills and attention to detail.
- Bachelors in CS/Engineering, or equivalent practical experience.
Nice to have
- Multiple cloud providers; cloud security fundamentals (IAM, network rules, encryption, audit logging).
- CIS Benchmarks or compliance frameworks (PCI-DSS, HIPAA, SOC 2).
- Terraform, Docker/Kubernetes.
- Basic understanding of AI/ML testing fundamentals
- Testing AI/ML cloud services or data pipelines.
Skills Required
- 2+ years of software automation testing experience
- Strong Python experience
- Hands-on Robot Framework experience
- Playwright or comparable UI automation experience
- Experience testing SaaS applications and REST APIs
- Working experience with at least one major cloud provider: AWS, Azure, GCP, or OCI, including APIs and IAM
- Strong debugging skills and attention to detail
- Bachelor's degree in Computer Science or Engineering, or equivalent practical experience
- Experience with multiple cloud providers
- Cloud security fundamentals, including IAM, network rules, encryption, and audit logging
- Experience with CIS Benchmarks or compliance frameworks such as PCI-DSS, HIPAA, or SOC 2
- Experience with Terraform, Docker, or Kubernetes
- Basic understanding of AI/ML testing fundamentals
- Experience testing AI/ML cloud services or data pipelines
Qualys Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Qualys and has not been reviewed or approved by Qualys.
-
Affordable Benefits — Benefits costs are widely viewed as low for employees and dependents, with healthcare often described as almost fully paid for. Feedback suggests this affordability helps offset perceptions of lower base pay in some roles.
-
Healthcare Strength — Healthcare offerings are broad, including multiple medical plan options, dental and vision coverage, mental health support, and disability insurance. Benefits are described as “pretty amazing” or “great,” reinforcing perceived quality and coverage depth.
-
Equity Value & Accessibility — Equity participation is accessible through company stock plans and an employee stock purchase plan. Compensation packages commonly include equity alongside salary and bonus, which some consider a meaningful part of total rewards.
Qualys Insights
What We Do
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com
