Senior Security Research Engineer

This is a hands-on, senior individual-contributor role. You will own complex research projects, mentor other engineers, work closely with Engineering and Product, and help improve automation across the team. The role comes with real freedom to choose the research topics and areas you go deep on, along with clear opportunities to grow your career at Qualys.

Responsibilities
Research:

• Lead vulnerability research across operating systems, databases, enterprise applications, cloud services, container platforms, and network devices.
• Research newly disclosed, zero-day, and actively exploited vulnerabilities, and prioritize work based on real-world risk.
• Analyze root causes, attack vectors, exploitability conditions, and potential business impact.
• Review technical designs, research methods, and code contributions for quality and consistency.

Exploit Validation & Detection

• Build exploit-based validation techniques that confirm whether vulnerabilities are exploitable in practice.
• Design safe, controlled validation methods that emulate attacker behavior without affecting production systems.
• Write validation logic that determines whether existing security controls such as WAFs, firewalls, EDRs, IPS, and compensating controls actually block exploitation.
• Set coding standards and quality guidelines for signature and detection content.

Automation & Tooling

• Improve automation across vulnerability research, exploit validation, content generation, testing, and release.
• Find and apply ways to use AI and LLM to speed up research work.
• Improve tooling and workflows to raise research quality and output.

Required Qualifications

• 6+ years of hands-on experience in vulnerability research, penetration testing, detection engineering, or security research.
• Strong background in vulnerability analysis, exploit development, and modern attack techniques.
• Solid understanding of core protocols, including TCP/IP, HTTP/HTTPS, FTP, SSH, SMTP, DNS, SSL/TLS, and modern web protocols.
• Broad knowledge of operating systems, databases, web technologies, cloud environments, and enterprise infrastructure.
• Proficiency with Python and Bash scripting.
• Experience with packet analysis, network troubleshooting, and protocol reverse engineering.
• Working knowledge of the OWASP Top 10, common attack techniques, and current threat actor tactics.
• Track record of leading projects and mentoring technical teammates.
• Strong written, verbal, and technical communication skills.

Preferred Qualifications

• Experience applying AI or LLM to security research or detection engineering.
• Contributions to CVEs, security advisories, open-source security tooling, or published research.
• Relevant certifications such as OSCP, OSCE, OSED, or GXPN (nice to have, not required).
• Experience building detection content or signatures for IPS, WAF, or EDR platforms.