Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Principal Security Researcher – Threat Defense Location: Pune, India (Hybrid) / Remote Department: Rese…
Skills: Security Research, Threat Detection, Python, Go, C
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! About the Role Qualys is looking for a detail-oriented Windows Patch Management Catalog Researcher to j…
Skills: Windows Patch Management, Software Packaging, Windows Registry, MSI/WiX, NSIS
Director, Product Management - Agentic AI Platform & Security
Foster City, California, United States · Hybrid
$210k–$240k/yr
Senior+$34M raised
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Director of Product Management – Agentic AI Platform & Security Location: Foster City, California (Min …
Skills: Product Management, AI, Cybersecurity, Multi-Agent Systems, Data Analysis
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! About the Role Qualys is looking for a detail-oriented Windows Patch Management Catalog Researcher to j…
Skills: Windows Patch Management, Software Packaging, Windows Registry, Silent Installation, MSI/WiX
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! What you get to do You will get to team up with incredibly talented and highly motivated engineers and …
Skills: Java, Spring Boot, Microservices, Cassandra, Elasticsearch
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Overview: We are seeking an experienced Principal Product Manager – HR Systems to lead the strategic pl…
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! About the Role At Qualys, we’re redefining how organizations secure their IT environments through a uni…
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Come work at a place where innovation and teamwork come together to support the most exciting missions …
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Job Posting Title Business Development Representative (BDR) Job Description Summary The Business Develo…
Skills: Pipeline Generation, Lead Qualification, B2B Sales, Prospecting, CRM
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Job Description As a Cyber Risk Advisor, you will be a vital member of the Qualys Cyber Risk Experts Se…
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Technical Project Manager – Enterprise Support. Position Summary The TPM is a strategic customer-facing…
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Responsibilities In this position, you will primarily be researching and implementing detections for vu…
Skills: Web Application Security, JavaScript, HTTP Protocol, OWASP Top 10, DAST
Sign up with Clera and we'll reach out the moment a role actually fits you — no more spraying applications into the void.
Full-time
Posted 47d ago
~40 hrs/week
Responsibilities
Lead R&D efforts to design detection engines that identify real customer risks and emerging attack vectors. Translate complex security research into production-grade features and share findings with the broader security community.
Requirements
Requires 5+ years of experience in security research or low-level software engineering with a hacker mindset. Proficiency in Python, Go, or C and a deep understanding of Linux internals and cloud environments are essential.
Full job description
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Principal Security Researcher – Threat Defense
Location: Pune, India (Hybrid) / Remote
Department: Research
The Mission
We are seeking a Security Researcher who is a builder, not just an analyst. Bridging the gap between advanced threat research and active defense, you will lead a R&D mandate to design engines that pinpoint real customer risk. You bring a rare blend of deep security expertise (Zero-days, CVEs, Exploits) and software engineering rigor to drive operational excellence at scale.
You will serve as a key player in our Research Department, moving beyond standard vulnerability analysis to build next-generation detection capabilities. Your work will directly influence our threat defense engine.
What You’ll Be Doing:
Conduct deep-dive research into emerging attack vectors to analyze vulnerability data and identify potential attack paths.
Assess vulnerability risks to develop tailored, actionable mitigation strategies and plans that address security gaps in critical systems.
Rapidly architect and build prototypes, PoCs, and detection tools. You won’t just theorize; you will write code (Python/Go/C) to test security hypotheses and demonstrate feasibility.
Design and validate algorithms based on network and application telemetry to detect complex exploit primitives (RCE, SQLi, Memory Corruption) at the execution boundary.
Partner with R&D and Product teams to translate complex research findings into production-grade security features, ensuring our engine evolves faster than the threat landscape.
Articulate security visions and research findings to the broader community through blogs, webinars, and industry conferences, reinforcing Qualys as a thought leader in the space.
The DNA We Need
We are looking for a technologist with a hacker mindset—someone who loves to explore how things work under the hood and prefers architecting solutions over maintaining legacy views.
5+ years of experience in security research or low-level software engineering, with a focus on advanced threat detection and deep attack analysis.
Proven ability to develop robust PoCs and tools. You are comfortable reading and writing code in modern frameworks (Python, Go, or similar).
Strong understanding of the Linux ecosystem, OS internals, and cloud-native environments.
A track record of taking a vulnerability or theoretical attack method and converting it into a concrete detection rule or defensive tool.
Excellent written and verbal communication skills in English. You can effectively explain complex kernel-level concepts to stakeholders and present findings.
Preferred Background:
Experience applying advanced AI/ML and LLMs to solve complex security challenges, automating expert tradecraft such as code analysis or adversarial simulation, to transform manual research workflows into autonomous, scalable defense engines.
Experience with eBPF, syscall tracing, or memory management.
Experience in architecting secure systems and deploying detection mechanisms to mitigate risk.
Experience building or securing developer-focused tools and pipelines.
Demonstrated ability to work independently in a fast-paced, unstructured environment where you wear multiple hats.
Why Join?
This is a role for a creator. You will have the mandate to innovate, the freedom to research, and the resources to build engines that define the state of the art in cyber defense.
Security and compliance for your global IT assets.
Industry
Computer and Network Security
Company size
1,001-5,000 employees
Founded
1999
Headquarters
Foster City, CA
LinkedIn followers
291,750
Total funding
$34M
Qualys, Inc. (NASDAQ: QLYS) is a leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.
The Qualys Enterprise TruRisk Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices.
Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com.
Offices: 919 E Hillsdale Blvd, Foster City, CA 94404, US · Survey No. 20, 10th to 16th Floor, Tower B Panchshil Business Park,, Pune, Pune 411005, IN · 39/2 Park St, Sydney, New South Wales 2000, AU · 7 Pl. de la Défense, Courbevoie, 92400, FR · München Flughafen, Terminalstraße Mitte 18, München, 85356 , DE
Security and compliance for your global IT assets.
Industry
Computer and Network Security
Company size
1,001-5,000 employees
Founded
1999
Headquarters
Foster City, CA
LinkedIn followers
291,750
Total funding
$34M
Qualys, Inc. (NASDAQ: QLYS) is a leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.
The Qualys Enterprise TruRisk Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices.
Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com.
Offices: 919 E Hillsdale Blvd, Foster City, CA 94404, US · Survey No. 20, 10th to 16th Floor, Tower B Panchshil Business Park,, Pune, Pune 411005, IN · 39/2 Park St, Sydney, New South Wales 2000, AU · 7 Pl. de la Défense, Courbevoie, 92400, FR · München Flughafen, Terminalstraße Mitte 18, München, 85356 , DE