Lead Security Engineer

Qualys; Pune District; On-site; INR 4,000,000 - 7,000,000; Full time

Job summary

Qualys in Pune, India seeks a Lead Security Engineer for Vulnerability Research Development. You will join a team researching and delivering detection signatures for our vulnerability scanning products.

This opening is your opportunity to work in the rapidly expanding field of computer security with a company with excellent customer ratings and outstanding growth rates. The ideal candidate has 7+ years in network/security, strong scripting skills, and hands-on experience with VPNs, IDS, and

Qualifications

• 7+ years of industry experience in network and systems security.
• In-depth knowledge of TCP/IP, SSL, HTTP, FTP, SSH, DNS and others.
• Knowledge of OWASP top 10 and familiarity with other web-based attacks.
• Proficiency in at least one scripting language (Python, Bash, Go).
• Ability to quickly analyse proofs-of-concept or exploits and translate them into accurate signatures.
• Experience with network analysis tools, and analysis of packet captures.
• Knowledge of different Databases (Oracle, DB2) and system Administration.
• Strong understanding of VPN, Firewalls, Intrusion detection systems (IDS), and security tools.
• Excellent written and verbal communication skills.

Responsibilities

• Research vulnerabilities in applications, operating systems, databases, TCP/IP protocols, network devices, and various services.
• Develop, test, and maintain high-quality detections to detect known vulnerabilities and 0-day threats.
• Research new and emerging technologies to identify vulnerabilities and exploits.
• Drive technical direction, prioritization, and execution of detection development initiatives.
• Collaborate with security researchers, product teams, and QA engineers to ensure timely delivery of detection content.
• Research Zero-day vulnerabilities and attack vulnerabilities to deliver fast detection content.
• Act as a technical escalation point for complex vulnerability research and detection challenges.
• Stay up to date with CVEs and security intelligence feeds.
• Work with Customer Support and Research teams to triage customer issues such as false positives/negatives.

Skills

7+ years experience in security

TCP/IP, SSL, HTTP, FTP, SSH, DNS

OWASP Top 10

Python, Bash, Go

POC/Exploit to signature translation

Network analysis & packet captures

VPN, Firewalls, IDS

Excellent communication

Education

BE/B.Tech/MCA (CS/IT preferred)

Tools

Python

Bash

Go

Docker

Kubernetes

Wireshark

Nmap

AWS/Azure

Oracle/DB2

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

We are seeking a passionate and detail-oriented Lead Security Engineer to join our Vulnerability Research Development team. As a Lead Security Engineer, you will join a motivated engineering research team responsible for researching, developing, and delivering detection signatures for our vulnerability scanning products. This opening is your opportunity to work in the rapidly expanding field of computer security with a company with excellent customer ratings and outstanding growth rates.

Responsibilities:

• Research vulnerabilities in the areas of applications, operating systems, databases, TCP/IP protocols, network devices, and various services.
• Develop, test, and maintain high-quality detections to detect known vulnerabilities and 0-day threats.
• Research new and emerging technologies to identify vulnerabilities and exploits.
• Drive technical direction, prioritization, and execution of detection development initiatives.
• Collaborate with security researchers, product teams, and QA engineers to ensure the timely delivery of detection content.
• Research Zero-day vulnerabilities and actively attack vulnerabilities to deliver fast detection content within hours of vulnerability disclosure.
• Act as a technical escalation point for complex vulnerability research and detection challenges.
• Stay up to date with the latest CVEs, advisories, and security intelligence feeds.
• Work with our Customer Support and Research teams to troubleshoot and triage customer issues such as false positives and false negatives.

Qualifications:

• 7+ years of industry experience in network and systems security.
• In-depth knowledge of TCP/IP, SSL, HTTP, FTP, SSH, DNS and others.
• Knowledge of OWASP top 10 and familiarity with other web-based attacks.
• Proficiency in at least one scripting language (Python, Bash, Go).
• Ability to quickly analyse proofs-of-concept or exploits and translate them into accurate signatures.
• Experience with network analysis tools, and analysis of packet captures.
• Knowledge of different Databases (Oracle, DB2, etc.) and system Administration.
• Strong understanding of VPN, Firewalls, Intrusion detection systems (IDS), and security tools.
• Excellent written and verbal communication skills.

Educational Qualification:

BE/B.Tech/MCA, preferably in Computer Science, Information Technology, or a related field

Additional Plus Competencies:

• Experience with large-scale vulnerability management programs.
• Proficient with regular expressions and system administration.
• Demonstrated ability to drive strategic initiatives and independently own technical roadmaps.
• Knowledge of Cloud Platforms (AWS, Azure, Oracle, etc.).
• Knowledge of container technologies such as Docker and Kubernetes.
• OSCP, CISSP, or SANS GIAC certifications.