At a Glance
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Responsibilities
Research and create signatures for the Qualys product to detect vulnerabilities in Industrial Control Systems.
Research new and emerging technologies to identify vulnerabilities and exploits.
Research zero-day and actively attack vulnerabilities to create signatures to identify vulnerable assets.
Build automation for day-to-day tasks.
Qualifications
Experience and strong knowledge in penetration testing and vulnerability management.
Knowledge and hands on experience with several types of security vulnerabilities and attacks such as cross-site scripting, privilege escalation, remote code execution.
Proficient with regular expressions.
Bachelor's in computer science with 5+ years of experience in Information Security domain or Masters in Computer Science or Cyber Security.
In-depth knowledge of TCP/IP, HTTP, DNS, FTP, SSH, TLS/SSL, and SMTP protocols.
Experience with scripting languages, including Python and Bash.
Experience with network analysis tools, analysis of packet captures.
System administrator experience on Windows or Unix platforms.
Excellent written and verbal communication skills.
Additional Plus Competencies
Understanding of Lua (preferred), or Python
Knowledge of Virtualization software (VMWare, Virtual PC/Virtual Box, XEN, etc.).
Knowledge of container technologies such as Docker and Kubernetes.
Able to handle projects independently.
Experienced in the use of vulnerability scanners, IDS, and multiple security tools.
Experience in developing security-related tools/programs.
OSCP and similar certifications.
Source: Qualys careers · View original posting
Qualys, Inc. is an American technology company based in Foster City, California, specializing in cloud-based security and compliance solutions. Founded in 1999, Qualys is recognized as a pioneer in software-as-a-service (SaaS) security, launching its flagship product, QualysGuard, in 2000. The company provides a unified cloud platform that delivers continuous security and compliance intelligence across various IT environments, including on-premises, cloud, and mobile devices. Qualys offers a comprehensive suite of services through its Qualys Cloud Platform, which includes Vulnerability Management, Asset Discovery, Cloud and Container Security, Web Application Security, Compliance Management, and more. The company serves over 10,000 subscription customers globally, including many from the Forbes Global 50, 500, and 2000. With strategic partnerships with major cloud providers and consulting firms, Qualys is positioned as a leading provider in unified cloud security and compliance, helping organizations protect their digital assets and meet regulatory requirements.
Compiled from public job postings, careers pages, and company materials. Data may not reflect current state — verify during interviews.
Security Philosophy
Security Team
Information regarding Qualys' AppSec team organizational structure, reporting lines, team size estimates, and common skill/tool patterns from active job postings is not publicly available. However, a job posting indicates a "Vice President, Product Management – CNAPP, AppSec and AI Security"role, suggesting leadership in these areas.
Key Initiatives
Preparing for an AppSec interview?
Get the weekly briefing 2,000+ security pros trust.
Interested in this role?
Apply on Qualys's site