Security Research Engineer

We are looking for Cloud Security Engineers to develop cloud security compliance signatures and build Agentic AI-driven automation to accelerate signature research, development, testing, and maintenance across AWS, Azure, GCP, Kubernetes, and SaaS platforms for Qualys products.

Key Responsibilities

• Research, develop, and maintain cloud security compliance signatures using APIs, Python, JSON processing, and cloud provider configurations.
• Leverage Agentic AI and LLM-based workflows to automate signature development, security research, compliance mapping, and validation.
• Research cloud services, emerging technologies, vulnerabilities, and security best practices to identify configuration risks and compliance gaps.
• Track cloud provider updates and assess their impact on existing signatures and compliance checks.
• Develop automated testing and validation frameworks to ensure signature accuracy and reliability.
• Map security controls to industry benchmarks, including CIS, NIST, ISO 27001, and PCI-DSS.
• Collaborate with security research and engineering teams to deliver scalable automation solutions.

Required Qualifications

• Hands-on development experience with Python, REST APIs, JSON, and scripting.
• Strong understanding of AWS, Azure, and/or GCP security configurations, IAM, networking, and cloud services.
• Knowledge of Terraform, Infrastructure as Code (IaC), and security assessment of cloud infrastructure configurations.
• Understanding of Agentic AI, LLMs, prompt engineering, and workflow automation.
• Familiarity with CSPM, CIEM, KSPM, Kubernetes security, cloud vulnerabilities, and hardening practices.
• Knowledge of security benchmarks such as CIS and NIST.
• Strong analytical, debugging, and problem-solving skills.

Good to Have

• Exposure to AI-driven code generation, automated testing, and human-in-the-loop workflows.
• Security or cloud certifications such as CCSP, CISSP, or AWS/Azure/GCP certifications.