Qualys is Hiring | Signature Engineer | Pune | Bachelor’s or Master’s Degree

• Research and create signatures for Qualys products to identify and fix non-compliant cloud platforms/services-related configurations and settings using API calls and JSON processing.
• Research upcoming and emerging technologies to identify vulnerabilities and exploits.
• Research hardening Cloud Platforms, SAAS applications, and cloud service configurations and settings.
• Track updates pushed by cloud service providers on respective supported cloud platforms/services.
• Keep updated with industry standards and features for systems and platform compliance.

• BS in computer science with 0-5 years of experience in the information security domain.
• MS in computer science or cyber security is preferable.
•  Experience with public cloud platforms (Azure, AWS, GCP, Oracle), including multi-cloud considerations.
• Experience with scripting languages, including Python and Bash.
• Knowledge and hands-on experience of several types of security vulnerabilities and attacks.
• Skills in designing CI/CD pipelines (e.g., Azure DevOps, Jenkins) and pipeline deployment (e.g., Terraform, Cloud Formation).
• Understand and explore APIs (REST, Java, PowerShell, Shell) provided by cloud service providers (AWS, Azure, Google Cloud Platform, Oracle, etc.).
• Knowledge of the NIST Cybersecurity Framework and MITRE ATT&CK Framework.
• Excellent communication skills with the ability to work collaboratively and effectively with cross-functional teams

Preferred Skills

• Security Certifications like CEH, CISA, CISM, CISSP, ISC2-CCSP
• Cloud platform-based certifications like AWS/Azure/GCP Certified Developer/Solution Architect
• Exposure to Security benchmarks like the CIS, SCCM, DISA, and STIG
• Basic understanding of security standards/mandates like CSA-CCM, NIST, PCI-DSS, MITRE, etc.