Lead Security Engineer

QLYS_IN Qualys Security TechServices Private Ltd.; Pune District; On-site; INR 1,800,000 - 2,800,000; Full time

Job summary

Qualys is seeking a Lead Engineer, Security Signatures to join its Threat Research Unit. You will research, develop, and deliver emergent vulnerability signatures for the Qualys cloud platform, focusing on detection in industrial control systems and web applications.

This role offers the chance to work on cutting-edge vulnerability research, exploitation awareness, and automation. You will collaborate with cross-functional teams, implement signatures, write tests, and contribute to the security

Qualifications

• Experience in penetration testing and vulnerability management.
• Knowledge of security vulnerabilities and attacks such as cross-site scripting, privilege escalation, and remote code execution.
• Proficiency with regular expressions.
• BS in CS with 5+ years in Information Security or MS in CS/Cyber Security.
• Strong knowledge of TCP/IP, HTTP, DNS, FTP, SSH, TLS/SSL, and SMTP protocols.
• Experience with Python and Bash scripting.
• Experience with network analysis and packet captures.
• System administration on Windows or Unix platforms.
• Excellent written and verbal communication skills.

Responsibilities

• Research and create signatures for the Qualys product to detect vulnerabilities in Industrial Control Systems.
• Research new and emerging technologies to identify vulnerabilities and exploits.
• Research zero-day and actively attack vulnerabilities to create signatures to identify vulnerable assets.
• Build automation for day-to-day tasks.

Skills

Penetration testing

Vulnerability management

Regular expressions

Python

Bash scripting

TCP/IP/HTTP/DNS/SSH/TLS

Communication skills

Education

Bachelor's in Computer Science

Master's in Computer Science or Cyber Security

Tools

Docker

Kubernetes

VMware

Packet capture tools

IDS

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! As a Lead Engineer, Security Signatures you will be part of a Qualys Threat Research Unit that is responsible for the research, development, and delivery of emergent vulnerability signatures. This opening is your opportunity to work on a unique security solution in the rapidly expanding fields of penetration testing, vulnerability assessments and cyber security.

Responsibilities

• Research and create signatures for the Qualys product to detect vulnerabilities in Industrial Control Systems.
• Research new and emerging technologies to identify vulnerabilities and exploits.
• Research zero-day and actively attack vulnerabilities to create signatures to identify vulnerable assets.
• Build automation for day-to-day tasks.

Qualifications

• Experience and strong knowledge in penetration testing and vulnerability management.
• Knowledge and hands on experience with several types of security vulnerabilities and attacks such as cross-site scripting, privilege escalation, remote code execution.
• Proficient with regular expressions.
• Bachelor's in computer science with 5+ years of experience in Information Security domain or Masters in Computer Science or Cyber Security.
• In-depth knowledge of TCP/IP, HTTP, DNS, FTP, SSH, TLS/SSL, and SMTP protocols.
• Experience with scripting languages, including Python and Bash.
• Experience with network analysis tools, analysis of packet captures.
• System administrator experience on Windows or Unix platforms.
• Excellent written and verbal communication skills.

Additional Plus Competencies

• Understanding of Lua (preferred), or Python Knowledge of Virtualization software (VMWare, Virtual PC/Virtual Box, XEN, etc.).
• Knowledge of container technologies such as Docker and Kubernetes.
• Able to handle projects independently.
• Experienced in the use of vulnerability scanners, IDS, and multiple security tools.
• Experience in developing security-related tools/programs.
• OSCP and similar certifications.

Join our talent community and receive the latest Qualys news, content, and be first in line for new job opportunities. Join our Talent Community! Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.