Senior Application Security Analyst

QLYS_IN Qualys Security TechServices Private Ltd.; Pune District; On-site; INR 1,400,000 - 2,400,000; Full time

Job summary

Qualys, Inc. in Pune seeks a senior application security expert to implement automated and manual penetration testing, assess web applications, and help shape secure design practices across the Qualys platform.

You will lead testing sessions, perform source code reviews (SAST/DAST), and collaborate with engineering teams to remediate vulnerabilities while expanding security tooling. Minimum 5 years of experience and hands-on knowledge of PHP, Java, Python, or Go are required, along with strong

Qualifications

• Minimum 5 years of strong application security experience with thorough understanding of web vulnerabilities.
• Experience with AI application penetration testing (not AI alone).
• Source Code Review / SAST and DAST methodologies must be demonstrated.

Responsibilities

• Assess web applications for security risks as domain expert.
• Perform manual and automated scanning on QualysGuard platform to find vulnerabilities.
• Lead ethical hacking and penetration testing sessions and remediation efforts.
• Collaborate with engineering to adopt secure design and coding practices.
• Develop tools to support investigation and improve web security posture.
• Work with security and product teams to add capabilities to QualysGuard.

Skills

Web security

Penetration testing

Ethical hacking

Threat modeling

SAST

DAST

Cloud security

PHP

Java

Python

Go

Education

Bachelor's/Master's in Engineering or Information Security

Tools

SAST tools

DAST tools

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! You will be acting as a subject matter expert to implement various automated and manual techniques and detailed penetration testing procedures that will cover all aspects of application security. You will apply your web security and penetration testing experience to thoroughly analyze our Qualys cloud platform for security vulnerabilities. You will work closely with our development teams to define the application security best practices, perform software architecture and design reviews, conduct black box and white box security testing, and support the identification, interpretation, and remediation of vulnerabilities across Qualys platform.

Responsibilities

• Serve as the domain expert to assess web applications for security risks
• Perform manual and automated scanning and security analysis QualysGuard platform to find web application vulnerabilities
• Lead ethical hacking and penetration testing sessions and remediation efforts
• Work with engineering teams during application development process to adopt secure design and coding practices
• Develop and extend tools that support investigation and improve web application security posture
• Collaborate with other security and product experts in Qualys to add new capabilities to QualysGuard product suite

Education

Education : Bachelors/Masters degree in Engineering, Information Security, Information Assurance, Network Security or related field

Experience

Experience: Minimum 5 years of strong application security experience with thorough understanding of web application vulnerabilities. Candidate should have exposure toward AI Appplication penetration testing (Not use of AI alone) and Agentic Implemenation for Security assessment. Source Code Review / SAST either Manual of Automated is must.A passion for ethical hacking and vulnerability research Knowledge of secure coding principles and practices for web applications Hands-on experience with application security assessment methodologies and tools Knowledge of cloud-based infrastructure and how it affect security implementations Excellent problem solving and analytical skills; outstanding oral and written communication skills Self-motivation and the ability to work under minimal supervision are a must Programming knowledge - PHP, Java, Python, or Go

Join our talent community and receive the latest Qualys news, content, and be first in line for new job opportunities. Join our Talent Community!

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.