Senior Application Security Analyst

Qualys; Maharashtra; On-site; INR 1,800,000 - 3,200,000; Full time

Job summary

Qualys is seeking an experienced Application Security expert to implement automated and manual testing procedures across the Qualys cloud platform. You will work with development teams to define best practices, conduct security testing (black and white box), review code, and help remediate vulnerabilities across the QualysGuard suite.

The role requires strong expertise in web security, hands-on testing, and knowledge of cloud infrastructure.

Qualifications

• Minimum 5 years of strong application security experience.
• Exposure to AI application penetration testing (not AI alone) and agentic implementation for security assessment.
• Source Code Review / SAST (manual or automated) is a must.
• Knowledge of secure coding principles for web applications.
• Hands-on experience with application security assessment methodologies and tools.
• Knowledge of cloud-based infrastructure and its impact on security implementations.
• Excellent problem solving and communication skills.
• Self-motivation and ability to work under minimal supervision.

Responsibilities

• Serve as domain expert to assess web applications for security risks.
• Perform manual and automated scanning and security analysis of QualysGuard platform to find web app vulnerabilities.
• Lead ethical hacking and penetration testing sessions and remediation efforts.
• Collaborate with engineering teams to adopt secure design and coding practices.
• Develop and extend tools to support investigation and improve web application security posture.
• Collaborate with security and product experts to add capabilities to QualysGuard product suite.

Skills

Web security

Penetration testing

Vulnerability research

Secure coding

Communication skills

Threat modeling

Education

Bachelor's/Master's in Engineering or Information Security

Tools

QualysGuard

SAST tools

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

You will be acting as a subject matter expert to implement various automated and manual techniques and detailed penetration testing procedures that will cover all aspects of application security. You will apply your web security and penetration testing experience to thoroughly analyze our Qualys cloud platform for security vulnerabilities. You will work closely with our development teams to define the application security best practices, perform software architecture and design reviews, conduct black box and white box security testing, and support the identification, interpretation, and remediation of vulnerabilities across Qualys platform.

Responsibilities

• Serve as the domain expert to assess web applications for security risks
• Perform manual and automated scanning and security analysis QualysGuard platform to find web application vulnerabilities
• Lead ethical hacking and penetration testing sessions and remediation efforts
• Work with engineering teams during application development process to adopt secure design and coding practices
• Develop and extend tools that support investigation and improve web application security posture
• Collaborate with other security and product experts in Qualys to add new capabilities to QualysGuard product suite.

Education

Bachelors/Masters degree in Engineering, Information Security, Information Assurance, Network Security or related field

Experience

• Minimum 5 years of strong application security experience with thorough understanding of web application vulnerabilities.
• Candidate should have exposure toward AI Application penetration testing (Not use of AI alone) and Agentic Implemenation for Security assessment.
• Source Code Review / SAST either Manual or Automated is must. A passion for ethical hacking and vulnerability research.
• Knowledge of secure coding principles and practices for web applications.
• Hands-on experience with application security assessment methodologies and tools.
• Knowledge of cloud-based infrastructure and how it affect security implementations.
• Excellent problem solving and analytical skills; outstanding oral and written communication skills.
• Self-motivation and the ability to work under minimal supervision are a must.

Programming knowledge

PHP, Java, Python, or Go