Senior Security Research Engineer

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! We are looking for Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing, and maintenance across AWS, Azure, GCP, Kubernetes, and SaaS platforms for Qualys products.

Key Responsibilities

Research, develop, and maintain cloud security compliance signatures using APIs, Python, JSON processing, and cloud provider configurations. Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping, and validation. Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.

Track cloud provider updates and assess their impact on existing signatures and compliance checks. Develop automated testing and validation frameworks to ensure signature accuracy and reliability. Map security controls to industry benchmarks, including CIS, NIST, ISO 27001, and PCI-DSS. Collaborate with security research and engineering teams to deliver scalable automation solutions.

Required Qualifications Hands-on development experience of 3 to 6 years with Python, REST APIs, JSON, and scripting. Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services. Knowledge of Terraform, Infrastructure as Code (IaC), and security assessment of cloud infrastructure configurations.

Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation. Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices. Knowledge of security benchmarks such as CIS and NIST. Strong analytical, debugging, and problem-solving skills. Good to Have Exposure to AI-driven code generation, automated testing, and human-in-the-loop workflows.

Security or cloud certifications such as CCSP, CISSP, or AWS/Azure/GCP certifications.