Lead Security Research Engineer

Qualys; Pune District; On-site; INR 1,800,000 - 2,400,000; Full time

Job summary

Qualys is seeking an experienced Lead Security Research Engineer to guide vulnerability detection signature research across its scanning product suite. You will mentor engineers, set technical direction, and drive automation and AI/ML enhancements to improve detection quality.

Join a collaborative team focused on cutting-edge security research, with opportunities to influence product strategy and work with cross-functional teams on challenging problems in vulnerability detection.

Qualifications

• 7+ years of experience in network and systems security with leadership or mentoring.
• Deep understanding of TCP/IP, HTTP, FTP, SSH, SSL/TLS.
• Hands-on experience with Python and Bash scripting.
• Hands-on experience with containers and orchestration (Docker, Kubernetes).
• Familiarity with VPNs, Firewalls, and IDS/IPS technologies.
• Excellent written and verbal communication skills.

Responsibilities

• Set technical direction and own the roadmap for vulnerability detection libraries across Qualys Scanner product suite.
• Lead the research, design, and development of new detection logic and enhancement of content for networks, apps, OS, and protocols.
• Mentor Senior and mid-level Research Engineers and establish best practices for high-quality detection content.
• Explore AI/ML techniques to accelerate research, automation for recurring tasks, and secure validation processes.
• Design and scale automation frameworks for recurring research, development, and validation tasks.
• Collaborate with customers, vendors, and internal teams to expand detection coverage and resolve complex issues.
• Represent the team in cross-functional planning with technical estimates and risk assessments.

Skills

Python

Bash scripting

Team leadership

Mentoring

Communication

Threat analysis

AI/ML awareness

Tools

Docker

Kubernetes

Job description

Job Description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Job Description We are seeking an experienced and technically exceptional Lead Security Research Engineer to drive our Vulnerability Detection Signature Research team. In this role, you will set the technical direction for how we research, develop, and deliver advanced vulnerability detection libraries for our scanning product suite, while mentoring engineers and raising the bar for detection quality across the team. Beyond hands-on research, you will own the roadmap for detection coverage, champion automation to scale our research capabilities, and partner with leadership and cross-functional teams to solve the hardest problems in vulnerability detection. Exposure to AI/ML is a strong plus. If you combine deep vulnerability research expertise with the ability to lead people and technical strategy, this role is for you.

Responsibilities

• Set technical direction and own the roadmap for vulnerability detection libraries (signatures) across Qualys Scanner product suite.
• Lead the research, design, and development of new detection logic and the enhancement of existing content for databases, applications, operating systems, TCP/IP protocols, and network devices.
• Mentor and technically guide Senior and mid-level Research Engineers, conducting design and code reviews and establishing best practices and standards for high-quality detection content.
• Explore and, where valuable, drive the adoption of AI/ML techniques to accelerate research, development, and validation such as automated signature generation, false positive/negative reduction, anomaly detection, and intelligent triage of emerging vulnerabilities.
• Design and scale automation frameworks for recurring research, development, and validation tasks.
• Continuously evaluate emerging technologies and threat trends, and collaborate with customers, vendors, and internal stakeholders to expand detection coverage.
• Partner with Customer Support and Research teams to lead the resolution of complex customer issues, such as false positives/negatives, and drive systemic fixes.
• Represent the team in cross-functional planning, providing technical estimates, risk assessments, and delivery commitments.
• Champion strong documentation, knowledge sharing, and a culture of engineering excellence.

Qualifications

• 7+ years of experience in network and systems security, including demonstrated technical leadership or team mentorship.
• Deep understanding of common protocols: TCP/IP, HTTP, FTP, SSH, SSL/TLS.
• Strong knowledge of common security vulnerabilities and mitigation techniques.
• Hands-on experience with Python and Bash scripting.
• Hands-on working experience with containers and orchestration tools (Docker, Kubernetes).
• Familiarity with network analysis tools and packet capture analysis.
• Strong ability to prioritize, plan, and manage multiple workstreams and people in a fast-paced environment.
• System administration experience on Windows or Unix/Linux platforms.
• Strong understanding of VPNs, Firewalls, and IDS/IPS technologies.
• Excellent written and verbal communication skills, including the ability to communicate technical concepts to both engineers and non-technical stakeholders.

Additional Plus Competencies

• Exposure to applying AI/ML to security problems - e.g., using machine learning for detection, classification, anomaly detection, or pattern recognition, or leveraging LLMs to automate research, code, or content-generation workflows.
• Knowledge of Lua (preferred) or Java.
• Experience with virtualization platforms such as VMWare, VirtualBox, XEN, etc.
• Understanding of cloud platforms (e.g., AWS, Azure, Oracle Cloud), including their AI/ML services.
• Experience using or developing vulnerability scanners, IDS/IPS, and other security tools.
• Prior experience building security-related tools or automation at scale.
• Industry certifications such as OSCP, CISSP, and GIAC.
• Track record of leading projects and small teams independently with minimal supervision.

Why Join Us?

Lead cutting-edge security research and shape how AI/ML transforms vulnerability detection alongside a talented, collaborative engineering team. Directly influence the security posture of thousands of customers. Opportunities for professional development, certifications, and continuous learning. Inclusive culture that values innovation, ownership, and customer impact. Join our talent community and receive the latest Qualys news, content, and be first in line for new job opportunities. Join our Talent Community!

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.