Security Engineer , Cloud

QLYS_US Qualys; Pune District; On-site; INR 2,000,000 - 3,600,000; Full time

Job summary

Qualys is seeking Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing, and maintenance across AWS, Azure, GCP, Kubernetes, and SaaS platforms.

You will research cloud services, vulnerabilities, and security best practices, map controls to CIS/NIST/ISO 27001/PCI-DSS, and collaborate with security research and engineering teams to deliver scalable automation solutions.

Qualifications

• Hands-on development experience with Python, REST APIs, JSON, and scripting.
• Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.
• Knowledge of Terraform, Infrastructure as Code (IaC), and security assessment of cloud infrastructure configurations.
• Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.
• Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.
• Knowledge of security benchmarks such as CIS and NIST.
• Strong analytical, debugging, and problem-solving skills.

Responsibilities

• Research, develop, and maintain cloud security signatures using APIs, Python, JSON processing, and cloud provider configurations.
• Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping, and validation.
• Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.
• Track cloud provider updates and assess their impact on existing signatures and compliance checks.
• Develop automated testing and validation frameworks to ensure signature accuracy and reliability.
• Map security controls to industry benchmarks, including CIS, NIST, ISO 27001, and PCI-DSS.
• Collaborate with security research and engineering teams to deliver scalable automation solutions.

Skills

Python

REST APIs

JSON

Scripting

AWS

Azure

GCP

Terraform

IaC

Agentic AI

LLMs

Prompt engineering

Automation

Kubernetes security

CSPM

CIEM

KSPM

CIS

NIST

Analytical thinking

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

We are looking for Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing, and maintenance across AWS, Azure, GCP, Kubernetes, and SaaS platforms for Qualys products.

Key Responsibilities

• Research, develop, and maintain cloud security compliance signatures using APIs, Python, JSON processing, and cloud provider configurations.
• Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping, and validation.
• Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.
• Track cloud provider updates and assess their impact on existing signatures and compliance checks.
• Develop automated testing and validation frameworks to ensure signature accuracy and reliability.
• Map security controls to industry benchmarks, including CIS, NIST, ISO 27001, and PCI-DSS.
• Collaborate with security research and engineering teams to deliver scalable automation solutions.

Required Qualifications

• Hands-on development experience with Python, REST APIs, JSON, and scripting.
• Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.
• Knowledge of Terraform, Infrastructure as Code (IaC), and security assessment of cloud infrastructure configurations.
• Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.
• Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.
• Knowledge of security benchmarks such as CIS and NIST.
• Strong analytical, debugging, and problem-solving skills.

Good to Have

• Exposure to AI-driven code generation, automated testing, and human-in-the-loop workflows.
• Security or cloud certifications such as CCSP, CISSP, or AWS/Azure/GCP certifications.