Lead Security Engineer
Qualys, Inc.1 day ago
Pune, IndiaStaff+
Responsibilities
- Research vulnerabilities across applications, operating systems, databases, TCP/IP protocols, network devices, and services.
- Develop, test, and maintain detection signatures for known vulnerabilities and zero-day threats.
- Analyze proofs of concept and exploits and translate them into accurate vulnerability signatures.
- Drive the technical direction, prioritization, and execution of detection development initiatives.
- Research emerging technologies and actively investigate zero-day vulnerabilities.
- Collaborate with security researchers, product teams, and QA engineers to deliver detection content.
- Serve as a technical escalation point for complex vulnerability research and detection challenges.
- Monitor CVEs, advisories, and security intelligence feeds.
- Troubleshoot and triage customer issues such as false positives and false negatives with Customer Support and Research teams.
Requirements
- 7+ years of industry experience in network and systems security.
- BE/B.Tech, MCA, preferably in Computer Science, Information Technology, or a related field.
- In-depth knowledge of TCP/IP, SSL, HTTP, FTP, SSH, DNS, OWASP Top 10, and web-based attacks.
- Proficiency in at least one of Python, Bash, or Go.
- Experience with network analysis tools and packet capture analysis.
- Knowledge of databases such as Oracle and DB2 and of system administration.
- Strong understanding of VPNs, firewalls, intrusion detection systems, and security tools.
- Ability to drive strategic initiatives and independently own technical roadmaps.
- Preferred experience with large-scale vulnerability management programs, regular expressions, cloud platforms, Docker, Kubernetes, and relevant system administration.
- OSCP, CISSP, or SANS GIAC certifications are additional preferred qualifications.
About Qualys, Inc.
Qualys builds a cloud-based security and compliance platform used by enterprises to automate vulnerability management, IT asset visibility, web application scanning, and policy/PCI compliance across on‑prem and cloud environments. Delivered as subscription SaaS, its Enterprise TruRisk Platform uses a single agent to provide continuous security telemetry for endpoints, servers, containers, and clouds. Founded in 1999 and headquartered in Foster City, California, Qualys is a public company trading on NASDAQ (QLYS).