Senior Security Research Engineer

Qualys; Pune District; On-site; INR 2,500,000 - 3,800,000; Full time

Job summary

Qualys is seeking Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation across AWS, Azure, GCP, Kubernetes and SaaS platforms for Qualys products. You will research, implement and validate configurations, automate testing, and map controls to CIS, NIST, ISO 27001 and PCI-DSS.

Collaboration with security research and engineering teams enables scalable automation.

Qualifications

• 3–6 years hands-on development with Python, REST APIs, JSON and scripting.
• Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.
• Knowledge of Terraform, Infrastructure as Code (IaC) and security assessment of cloud configurations.
• Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.
• Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.
• Knowledge of CIS / NIST benchmarks.

Responsibilities

• Develop cloud security compliance signatures using APIs, Python, JSON and cloud configurations.
• Leverage Agentic AI and LLM workflows to automate signature development and validation.
• Research cloud services, vulnerabilities and security best practices to identify risks and gaps.
• Track cloud provider updates and assess impact on signatures and compliance checks.
• Develop automated testing/validation frameworks for signature accuracy and reliability.
• Map security controls to CIS, NIST, ISO 27001, PCI-DSS.
• Collaborate with security research and engineering teams to deliver scalable automation.

Skills

Python

REST APIs

JSON

Scripting

Cloud security

AWS/Azure/GCP

Terraform

Agentic AI / LLMs

CIEM / KSPM

Networking

Tools

Terraform

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!We are looking for Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing, and maintenance across AWS, Azure, GCP, Kubernetes, and SaaS platforms for Qualys products.Key ResponsibilitiesResearch, develop, and maintain cloud security compliance signatures using APIs, Python, JSON processing, and cloud provider configurations.Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping, and validation.Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.Track cloud provider updates and assess their impact on existing signatures and compliance checks.Develop automated testing and validation frameworks to ensure signature accuracy and reliability.Map security controls to industry benchmarks, including CIS, NIST, ISO 27001, and PCI-DSS.Collaborate with security research and engineering teams to deliver scalable automation solutions.Required QualificationsHands-on development experience of 3 to 6 years with Python, REST APIs, JSON, and scripting.Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.Knowledge of Terraform, Infrastructure as Code (IaC), and security assessment of cloud infrastructure configurations.Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.Knowledge of security benchmarks such as CIS and NIST.Strong analytical, debugging, and problem-solving skills.Good to HaveExposure to AI-driven code generation, automated testing, and human-in-the-loop workflows.Security or cloud certifications such as CCSP, CISSP, or AWS/Azure/GCP certifications.