Senior Security Research Engineer

Overview

Develop and maintain cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing and maintenance across AWS, Azure, GCP, Kubernetes and SaaS platforms for Qualys products.

What you'll do

• Research, develop and maintain cloud security compliance signatures using APIs, Python, JSON processing and cloud provider configurations.
• Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping and validation.
• Research cloud services, emerging technologies, vulnerabilities and security best practices to identify configuration risks and compliance gaps.
• Track cloud provider updates and assess their impact on existing signatures and compliance checks.
• Develop automated testing and validation frameworks to ensure signature accuracy and reliability.
• Map security controls to industry benchmarks, including CIS, NIST, ISO 27001 and PCI-DSS.
• Collaborate with security research and engineering teams to deliver scalable automation solutions.

What you'll need

• Hands-on development experience of 3 to 6 years with Python, REST APIs, JSON and scripting.
• Strong understanding of AWS, Azure and/or GCP security configurations, IAM, networking and cloud services.
• Knowledge of Terraform, Infrastructure as Code (IaC) and security assessment of cloud infrastructure configurations.
• Understanding of Agentic AI, LLMs, prompt engineering and workflow automation.
• Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities and hardening practices.
• Knowledge of security benchmarks such as CIS and NIST.
• Strong analytical, debugging and problem-solving skills.

Nice to have

• Exposure to AI-driven code generation, automated testing and human-in-the-loop workflows.
• Security or cloud certifications such as CCSP, CISSP or AWS/Azure/GCP certifications.

Details

• Location: Pune.