Senior Security Research Engineer

QLYS_IN Qualys Security TechServices Private Ltd.; Pune District; On-site; INR 1,600,000 - 2,300,000; Full time

Job summary

Qualys, Inc. is seeking a Senior Security Research Engineer to join the Vulnerability Detection Signature Research team. You will research, develop, and deliver vulnerability detection signatures for our scanning products, while addressing customer issues and collaborating with cross-functional teams.

You will mentor peers and explore AI/ML techniques to accelerate research, with emphasis on end-to-end ownership of complex challenges and staying current on vulnerabilities and countermeasures.

Qualifications

• 4+ years of experience in network and information security.
• BE/B.Tech/MCA in CS/IT or related field.
• Deep understanding of TCP/IP, HTTP, FTP, SSH, SSL/TLS.
• Hands-on experience with Python and Bash scripting.
• Hands-on experience with containers and orchestration (Docker, Kubernetes).
• Familiarity with network analysis tools and packet capture.
• Strong communication and customer-facing abilities.
• Ability to work in a fast-paced environment.

Responsibilities

• Research, develop, implement, and improve vulnerability detections and scanning processes for our products.
• Investigate, analyze, and troubleshoot vulnerability detection issues reported by customers, then modify the code to resolve these problems.
• Participate in and help drive customer calls and meetings, ensuring issues are understood and addressed.
• Stay up to date with the latest vulnerabilities, attacks, and countermeasures.
• Coordinate team tasks, prioritize work, and ensure timely resolution of customer issues.
• Mentor junior engineers and share knowledge across the team.
• Explore how AI/ML can accelerate research, development, and validation such as automated signature generation, false positive/negative reduction, anomaly detection, and triage of emerging vulnerabilities.

Skills

Network security

Python

Bash scripting

Docker

Kubernetes

Network analysis

Unix/Linux

VPNs

Firewalls

IDS/IPS

TCP/IP

Education

BE/B.Tech/MCA in CS/IT or related field

Tools

Docker

Kubernetes

Linux

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Job Description: We are looking for a highly skilled and motivated Senior Security Research Engineer to join our Vulnerability Detection Signature Research team. In this role, you will research, develop, and deliver vulnerability detection signatures for our scanning products. You will investigate and resolve vulnerability scanning and detection issues that impact our customers, working within our sustenance research team to ensure expert handling of customer concerns and support escalations. Collaboration with cross-functional teams will be key to resolving complex challenges. This position demands a strong technical foundation in vulnerability management, scanning tools, and security best practices, along with the ability to own problems end-to-end, mentor peers, and handle customer-facing issues with confidence.

Responsibilities

• Research, develop, implement, and continuously improve vulnerability detections and scanning processes for our products.
• Investigate, analyze, and troubleshoot vulnerability detection issues reported by customers, then modify the code to resolve these problems.
• Participate in and help drive customer calls and meetings, ensuring that all issues are clearly understood and effectively addressed.
• Dedicate time to staying up to date with the latest vulnerabilities, attacks, and countermeasures.
• Help coordinate team tasks, prioritize work, and ensure timely resolution of customer issues.
• Mentor junior engineers and share knowledge across the team.
• Explore, where valuable, how AI/ML techniques can accelerate research, development, and validation such as automated signature generation, false positive/negative reduction, anomaly detection, and triage of emerging vulnerabilities.

Required Qualifications

• 4+ years of experience in network and systems security.
• BE/B.Tech/MCA, preferably in Computer Science, Information Technology, or a related field.
• Deep understanding of common protocols: TCP/IP, HTTP, FTP, SSH, SSL/TLS.
• Strong knowledge of common security vulnerabilities and mitigation techniques.
• Hands-on experience with Python and Bash scripting.
• Hands-on working experience with containers and orchestration tools (Docker, Kubernetes).
• Familiarity with network analysis tools and packet capture analysis.
• Ability to prioritize and manage multiple tasks in a fast-paced environment.
• System administration experience on Windows or Unix/Linux platforms.
• Strong understanding of VPNs, Firewalls, and IDS/IPS technologies.
• Excellent written and verbal communication skills.

Preferred Qualifications

• Exposure to applying AI/ML to security problems - e.g., using machine learning for detection, classification, anomaly detection, or pattern recognition, or leveraging LLMs to automate research, code, or content-generation workflows.
• Knowledge of Lua (preferred) or Java.
• Experience with virtualization platforms such as VMWare, VirtualBox, XEN, etc.
• Understanding of cloud platforms (e.g., AWS, Azure, Oracle Cloud).
• Experience using or developing vulnerability scanners, IDS/IPS, and other security tools.
• Prior experience building security-related tools or automation.
• Industry certifications such as OSCP, CISSP, and GIAC.
• Ability to lead projects independently and work with minimal supervision.

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.