Senior Security QA Engineer, Cloud
Qualys, Inc.1 day ago
Pune, IndiaSenior
Responsibilities
- Develop and maintain automated functional, API, regression, integration, security, and end-to-end test suites.
- Build test automation using Python, Java, Bash/Shell, REST APIs, and automation frameworks.
- Validate cloud security configurations, compliance signatures, and security policies across multi-cloud environments.
- Automate testing for AWS, Azure, GCP, Kubernetes, containers, microservices, and infrastructure-as-code.
- Integrate automated tests into CI/CD pipelines using Jenkins or similar tools.
- Use generative AI and AI-assisted tools for test-case generation, code creation, test-data generation, log analysis, defect investigation, documentation, and productivity improvement.
- Perform security and compliance testing against CIS, NIST, PCI-DSS, DISA/STIG, CSA-CCM, and MITRE ATT&CK.
- Collaborate with development, security, DevOps, and product teams to improve quality, automation coverage, and release efficiency.
Requirements
- Senior-level experience building automated testing solutions for cloud security, APIs, SaaS applications, and security controls.
- Strong experience with Python, Java, Bash/Shell, REST APIs, automation frameworks, and automated QA practices.
- Experience testing AWS, Azure, GCP, Oracle Cloud, Kubernetes, containers, microservices, and infrastructure-as-code.
- Knowledge of security and compliance testing involving CIS, NIST, PCI-DSS, DISA/STIG, CSA-CCM, and MITRE ATT&CK.
- Strong analytical and problem-solving skills with an automation-first approach to testing.
- Security certifications such as CEH, CISA, CISM, CISSP, or ISC2-CCSP are a plus.
- Cloud certifications such as AWS, Azure, or GCP Certified Developer or Solution Architect are a plus.
- Exposure to security benchmarks and standards including CIS, SCCM, DISA, STIG, CSA-CCM, NIST, PCI-DSS, and MITRE is a plus.
Tech Stack
Categories
About Qualys, Inc.
Qualys builds a cloud-based security and compliance platform used by enterprises to automate vulnerability management, IT asset visibility, web application scanning, and policy/PCI compliance across on‑prem and cloud environments. Delivered as subscription SaaS, its Enterprise TruRisk Platform uses a single agent to provide continuous security telemetry for endpoints, servers, containers, and clouds. Founded in 1999 and headquartered in Foster City, California, Qualys is a public company trading on NASDAQ (QLYS).