Security Research Engineer
Qualys, Inc.2 hours ago
Pune, IndiaMid Level
Responsibilities
- Research, design, develop, and enhance vulnerability detection libraries and signatures for the Qualys Scanner product suite.
- Build detection logic for databases, applications, operating systems, TCP/IP protocols, and network devices.
- Research emerging technologies and collaborate with customers, vendors, and internal stakeholders to expand detection coverage.
- Automate recurring research, development, and validation tasks.
- Explore AI/ML techniques for signature generation, false-positive and false-negative reduction, anomaly detection, and vulnerability triage.
- Troubleshoot customer issues, including false positives and false negatives, with Customer Support and Research teams.
- Create high-quality detection content through documentation and collaboration.
Requirements
- 4+ years of experience in network and systems security.
- Deep understanding of TCP/IP, HTTP, FTP, SSH, and SSL/TLS protocols.
- Strong knowledge of common security vulnerabilities and mitigation techniques.
- Hands-on experience with Python and Bash scripting, containers, and orchestration tools such as Docker and Kubernetes.
- Familiarity with network analysis tools and packet-capture analysis.
- System administration experience on Windows or Unix/Linux platforms.
- Strong understanding of VPNs, firewalls, and IDS/IPS technologies.
- Excellent written and verbal communication skills.
- Preferred qualifications include AI/ML security applications, Lua or Java, VMware/VirtualBox/Xen, AWS/Azure/Oracle Cloud, vulnerability scanners, IDS/IPS, security-tool development, OSCP/CISSP/GIAC certifications, and independent project leadership.
Benefits
- Professional development, certification, and continuous-learning opportunities.
- Inclusive, collaborative culture focused on innovation, ownership, and customer impact.