Security Research Engineer at Qualys - Pune, India

Join Qualys, a company where innovation and teamwork converge to support critical global missions. We are seeking a highly skilled and motivated Security Research Engineer to join our Vulnerability Detection Signature Research team in Pune, India. This role is instrumental in researching, developing, and delivering advanced vulnerability detection libraries for our VMDR scanning products. You will collaborate closely with cross-functional teams to address complex security challenges and ensure our customers receive accurate, high-quality vulnerability coverage.

If you possess a strong foundation in vulnerability research, hands-on security engineering experience, and solid coding skills, with a passion for delving into technologies to uncover weaknesses, this opportunity is ideal for you.

Responsibilities

• Research, design, and develop new vulnerability detection libraries (signatures) or enhance existing ones for Qualys VMDR scanner products.
• Build robust detection logic for a diverse range of technologies, including databases, applications, operating systems, TCP/IP protocols, and network devices.
• Continuously research emerging technologies and collaborate with customers, vendors, and internal stakeholders to expand detection coverage.
• Automate recurring research, development, and validation tasks to improve efficiency.
• Work closely with Customer Support and Research teams to troubleshoot and resolve customer issues, such as false positives/negatives.
• Contribute to the creation of high-quality detection content through comprehensive documentation and effective collaboration.

Qualifications

• A minimum of 2 years of experience in network and systems security.
• Deep understanding of common network protocols, including TCP/IP, HTTP, FTP, SSH, and SSL/TLS.
• Hands-on experience with Python and Bash scripting for security-related tasks.
• Practical working experience with containerization and orchestration tools such as Docker and Kubernetes.
• Proficiency in using and developing regular expressions.
• Demonstrated ability to prioritize and manage multiple tasks effectively in a fast-paced environment.
• Experience in system administration on Windows or Unix/Linux platforms.
• Strong understanding of VPNs, Firewalls, and Intrusion Detection/Prevention Systems (IDS/IPS) technologies.
• Excellent written and verbal communication skills, essential for team collaboration and documentation.

Additional Plus Competencies

• Knowledge of Lua (preferred) or Java programming languages.
• Experience with virtualization platforms like VMWare, VirtualBox, XEN, etc.
• Understanding of major cloud platforms, including AWS, Azure, and Oracle Cloud.
• Experience using or developing vulnerability scanners, IDS/IPS, and other security tools.
• Prior experience in building security-related tools or automation scripts.
• The ability to lead projects independently and work with minimal supervision is highly valued.

Why Join Qualys?

• Engage in cutting-edge security research alongside a talented and collaborative engineering team.
• Directly influence the security posture of thousands of customers worldwide.
• Access opportunities for professional development, certifications, and continuous learning.
• Become part of an inclusive culture that champions innovation, ownership, and customer impact.