Qualys

Senior Web Application Security Engineer

India · Work style not stated · Full time

Apply on the employer’s site ↗See how well you match this job

You apply directly with the employer. ROLIVA does not submit applications from this page and is not the employer.

About the role

Description from the employer’s posting. Check the employer’s page for the current version.

EmployerQualys
LocationIndia
Work styleWork style not stated
Employment typeFull time
Employer posted4 Aug 2026

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Responsibilities
In this position, you will primarily be researching and implementing detections for vulnerabilities on all the latest web application technologies. You will also be expected to fine-tune existing logic and payloads to detect vulnerabilities and CVEs with zero false positives for the Qualys Web Application Security product. Efficient problem-solving and troubleshooting skills are necessary, as well as using the latest tools in the industry.

Required Skills:

* 4-8 years of industry experience in web application security

* Create exploits, proof-of-concept for web application vulnerabilities

* Strong JavaScript programming skills

* Knowledge of HTTP protocol (Requests, responses, Cookies, etc.)

* Understanding of web application vulnerabilities, OWASP Top 10 in Web Applications, API, and LLMs

Show full description

* Exposure to DAST/BlackBox tools

* Web application security scanning tools like BURP/ZAP, SQLMap, CURL

* Experience with network analysis tools and analysis of packet captures.

* Proficient with regular expressions.

* System administrator experience on Windows or Unix platforms.

* Strong analytical and problem-solving skills

* Passion for web security and attention to detail

* Experience with scripting languages, including Python and Bash

* Exposure to JAVA programming

* Experience with Selenium, Postman scripting

* Experience with Metasploit/Nessus exploits (especially HTTP-related )

* Experience with web application firewalls (WAF) rules, ModSecurity

* Exposure to WEB 2.0, XML/XPath, JSON, Swagger

* Database/SQL knowledge

* Experienced in the use of various scanners and open-source security tools.

* Experience in developing security-related tools/programs.

* Ability to work independently

* Published research

* Security certifications

Education
Bachelor’s / Master’s degree in Computer Science, Engineering, or equivalent practical experience

See how well you match this job Apply on the employer’s site ↗

Check your resume against this job Free, no sign-up. Nothing you paste is stored.

Staying safe while you apply

Never pay to apply, interview or accept an offer. ROLIVA never asks you for payment to apply to a job.
Apply only through the official “Apply on the employer’s site” button, on the employer’s own site, and check that a recruiter’s email uses that employer’s own domain rather than a free email address.
Be cautious of an offer made with no real interview, or pressure to decide quickly or share financial details early.

Does something look wrong with this listing? Use “Report broken link” in the role details, or read ROLIVA’s full job-safety guidance ↗.

Preparing for this role with ROLIVA

Check the fit.
Compare the requirements with the experience you have confirmed, including gaps.
Prepare honestly.
Build interview stories and application drafts from your own evidence.
Keep track.
Save the role and record your own application status and follow-ups.

Create a free workspace or log in.