Senior Security Research Engineer
QualysPune, Maharashtra, India
Posted January 29, 2026
Full Time
About the Company
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com.
Job Description
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Conduct research and develop tailored mitigation strategies for vulnerabilities in critical systems.
Requirements
- Research, analyze, and assess attack surface and vulnerability data
- Develop tailored and actionable mitigation strategies and plans to address vulnerability risk
- Work with new and emerging vulnerability data to identify potential attack paths in critical systems.
- Document, develop and present mitigation strategies in web applications, databases, standalone applications, etc.
- Analyze the root cause of vulnerabilities and support the prioritization of mitigations based on risk and return on mitigation
- Provide mitigation strategies that prioritize risk against level of effort for multiple systems or organizations
- Catalog mitigation advice, challenges, and trends and patterns
- Patch diffing and reverse engineering with tools such as Ghidra, IDA, etc.
- Provide subject matter expertise on tailored mitigations to resolve and remediate vulnerabilities on targeted technologies
- Conduct research to assess and create software patches and configuration changes to be applied to varied software, middleware and hardware
- Provide assessment including security, system, and business impact of vulnerabilities
- Analyze vulnerability data and support management of identified vulnerabilities, including tracking, remediation, and reporting