Sr Security Engineer
QualysPune, Maharashtra, India
Posted October 17, 2023
Full Time
About the Company
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com.
Job Description
We are looking for a Sr Security Engineer to work on researching, analyzing, and assessing attack surface and vulnerability data, and developing tailored and actionable mitigation strategies and plans to address vulnerability risk.
Requirements
- Research, analyze, and assess attack surface and vulnerability data
- Develop tailored and actionable mitigation strategies and plans to address vulnerability risk
- Work with new and emerging vulnerability data to identify potential attack paths in critical systems
- Document, develop and present mitigation strategies in web applications, databases, standalone applications, etc.
- Analyze the root cause of vulnerabilities and support the prioritization of mitigations based on risk and return on mitigation
- Provide mitigation strategies that prioritize risk against level of effort for multiple systems or organizations
- Catalog mitigation advice, challenges, and trends and patterns
- Patch diffing and reverse engineering with tools such as Ghidra, IDA, etc.
- Provide subject matter expertise on tailored mitigations to resolve and remediate vulnerabilities on targeted technologies
- Work in fast-paced startup like environment with shifting priorities to handle and maintain balance with multiple stakeholders
- Conduct research to assess and create software patches and configuration changes to be applied to varied software, middleware and hardware
- Provide assessment including security, system, and business impact of vulnerabilities
- Must be able to think ahead to avoid business outages based on the lab results
- Analyze vulnerability data and support management of identified vulnerabilities, including tracking, remediation, and reporting