Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Qualys, Inc., the leading provider of cutting edge cloud-based security provider is looking for highly skilledSignatureEngineerfor Cloud Security Complianceengineering team.
As aSignatureEngineeryou will be part of anengineering team that is responsible for the research, development, and delivery of compliancesignatures for Cloud security product. In this team you will work on numerous Cloud platforms, Cloud Services, SAAS applications and security standards like CIS, CSA-CCM, NIST, DISA, PCI-DSS and help customers assess the configurations and compliance.
Responsibilities:
Understand and explore APIs (REST, Java, PowerShell, Shell) provided by Cloud service providers (AWS, Azure, Google Cloud Platform etc.)
Based on research develop Java basedsignatures to identify and fix non-compliant cloud platforms/services related configurations and settings using Java API calls and Json Processing
Research on hardening Cloud-Platforms , SAAS applications and cloud servicesconfigurations/settings
Track updates pushed by cloud service provider on respective supported cloud platforms/services
Keep updates with industry standards and features set for systems and platformcompliance.Qualifications:
BS/MS in Computer Science or a related field.
Experience level 0-5 years.
Knowledge in Java Programming , Rest APIs , Security concepts
Proficient in Regular Expressions and Programming methods
Strong knowledge of Cloud Architectures and Security space
Knowledge and understanding with Cloud services/Platforms and various cloud service provider offerings (AWS, Azure, Google)
Knowledge and understanding with SAASapplications(Salesforce,O365, GSuite , Zoom)
Conversant with Shell, PowerShell scripting
Good communication skills
Good understanding on domain of Information SecurityPluses:
Security Certifications like: CEH, CISA, CISM, CISSP, ISC2-CCSP
Cloud platform-based certifications like: AWS/Azure/GCP Certified Developer/Solution Architect
Exposure to Security benchmarks like CIS or SCCM, DISA and STIG
Basic understanding of security standards/mandates like CSA-CCM, NIST, PCI-DSS etc.