Qualys
Security Research Engineer
India · Work style not stated · Full time
Apply on the employer’s site ↗See how well you match this job
You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.
About the role
Description from the employer’s posting. Check the employer’s page for the current version.
- EmployerQualys
- LocationIndia
- Work styleWork style not stated
- Employment typeFull time
- Employer posted
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
We are seeking a highly skilled and motivated Security Research Engineer to join our Vulnerability Detection Signature Research team. In this role, you will research, develop, and deliver advanced vulnerability detection libraries for VMDR scanning products. You will partner closely with cross-functional teams to solve complex challenges and ensure our customers receive accurate, high-quality vulnerability coverage.
If you have a strong foundation in vulnerability research, hands-on security engineering, and solid coding experience and you enjoy diving deep into technologies, this role is for you. Exposure to AI/ML, or an interest in exploring how it can accelerate security research, is a strong plus.
Responsibilities
Research, design, and develop new vulnerability detection libraries (signatures), or enhance existing ones, for Qualys Scanner product suite.
Show full description
Build detection logic for a wide range of technologies including databases, applications, operating systems, TCP/IP protocols, and network devices.
Continuously research emerging technologies and collaborate with customers, vendors, and internal stakeholders to extend detection coverage.
Automate recurring research, development, and validation of tasks.
Explore, where valuable, how AI/ML techniques can accelerate research, development, and validation such as automated signature generation, false positive/negative reduction, anomaly detection, and triage of emerging vulnerabilities.
Work closely with Customer Support and Research teams to troubleshoot and resolve customer issues such as false positives/negatives.
Contribute to high-quality detection content through strong documentation and collaboration.
Qualifications
4+ years of experience in network and systems security.
Deep understanding of common protocols: TCP/IP, HTTP, FTP, SSH, SSL/TLS.
Strong knowledge of common security vulnerabilitiesand mitigation techniques.
Hands-on experience with Python and Bash scripting.
Hands-on working experience with containers and orchestration tools (Docker, Kubernetes).
Familiarity with network analysis tools and packet capture analysis.
Ability to prioritize and manage multiple tasks in a fast-paced environment.
System administration experience on Windows or Unix/Linux platforms.
Strong understanding of VPNs, Firewalls, and IDS/IPS technologies.
Excellent written and verbal communication skills.
Additional Plus Competencies
Exposure to applying AI/ML to security problems- e.g., using machine learning for detection, classification, anomaly detection, or pattern recognition, or leveraging LLMs to automate research, code, or content-generation workflows.
Knowledge of Lua (preferred) or Java.
Experience with virtualization platforms such as VMWare, VirtualBox, XEN, etc.
Understanding of cloud platforms (e.g., AWS, Azure, Oracle Cloud).
Experience using or developing vulnerability scanners, IDS/IPS, and other security tools.
Prior experience building security-related tools or automation.
Industry certifications such as OSCP, CISSP, and GIAC.
Ability to lead projects independently and work with minimal supervision.
Why Join Us?
Work on cutting-edge security research with a talented, collaborative engineering team.
Directly influence the security posture of thousands of customers.
Opportunities for professional development, certifications, and continuous learning.
Inclusive culture that values innovation, ownership, and customer impact.
Check your resume against this job Free, no sign-up. Nothing you paste is stored.
Staying safe while you apply
- Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
- Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
- Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.
Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.
Preparing for this role with ROLIVA
- Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
- Prepare honestly.
Build interview stories and application drafts from your own evidence.
- Keep track.
Save the role and record your own application status and follow-ups.
At a glance
- Employment typeFull time
- Employer posted
- Added to ROLIVA
- Last checked
Skills in this posting
Skills ROLIVA found in the employer’s own description above. A mention is not a requirement.