Senior Web Application Security Engineer

QLYS_IN Qualys Security TechServices Private Ltd.; Pune District; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

Qualys seeks a security engineer to research and implement detections for vulnerabilities across modern web technologies. You will fine-tune logic and payloads to achieve zero false positives for the Qualys Web Application Security product.

With 4–8 years in web app security, you will use Burp/ZAP, SQLMap, and other tools to identify issues, and contribute to scripting in Python/Bash while collaborating with cross-functional teams.

Qualifications

• In-depth knowledge of web application vulnerabilities and secure coding practices.
• Experience crafting exploits/PoCs for web app vulnerabilities.
• Familiarity with web protocols, HTTP requests/responses, cookies, and headers.
• Hands-on with security testing tools (Burp, ZAP, SQLMap).
• Knowledge of OWASP Top 10 and API/LLM security implications.

Responsibilities

• Research and implement detections for vulnerabilities across web tech.
• Fine-tune logic and payloads to reduce false positives for the Web App Security product.
• Utilize latest industry tools for vulnerability detection and remediation.
• Collaborate with teams to improve security tooling and automation.

Skills

Web security experience

JavaScript proficiency

Python/Bash scripting

HTTP protocol knowledge

OWASP Top 10 understanding

DAST/BlackBox testing

Problem-solving

Analytical thinking

Independent work

Education

Bachelor's/Master's in CS/Engineering or equivalent

Tools

Burp Suite

ZAP

SQLMap

CURL

Postman scripting

Selenium

Metasploit

Nessus

ModSecurity/WAF rules

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Responsibilities

In this position, you will primarily be researching and implementing detections for vulnerabilities on all the latest web application technologies. You will also be expected to fine-tune existing logic and payloads to detect vulnerabilities and CVEs with zero false positives for the Qualys Web Application Security product. Efficient problem-solving and troubleshooting skills are necessary, as well as using the latest tools in the industry.

Required Skills

• 4-8 years of industry experience in web application security
• Create exploits, proof-of-concept for web application vulnerabilities
• Strong JavaScript programming skills
• Knowledge of HTTP protocol (Requests, responses, Cookies, etc.)
• Understanding of web application vulnerabilities, OWASP Top 10 in Web Applications, API, and LLMs
• Exposure to DAST/BlackBox tools
• Web application security scanning tools like BURP/ZAP, SQLMap, CURL
• Experience with network analysis tools and analysis of packet captures.
• Proficient with regular expressions.
• System administrator experience on Windows or Unix platforms.
• Strong analytical and problem-solving skills
• Passion for web security and attention to detail
• Experience with scripting languages, including Python and Bash
• Exposure to JAVA programming
• Experience with Selenium, Postman scripting
• Experience with Metasploit/Nessus exploits (especially HTTP-related )
• Experience with web application firewalls (WAF) rules, ModSecurity
• Exposure to WEB 2.0, XML/XPath, JSON, Swagger
• Database/SQL knowledge
• Experienced in the use of various scanners and open-source security tools.
• Experience in developing security-related tools/programs.
• Ability to work independently
• Published research
• Security certifications

Education

Bachelor's / Master's degree in Computer Science, Engineering, or equivalent practical experience

Join our talent community and receive the latest Qualys news, content, and be first in line for new job opportunities. Join our Talent Community! Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.