Senior Security QA Engineer, Cloud
The full posting
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
As a Senior Security QA Engineer, you will be part of an engineering team responsible for designing, developing, and delivering automated testing solutions for cloud security. The role combines QA automation, cloud security, API testing, compliance testing, and infrastructure automation.
You will be responsible for building robust automated test frameworks to validate cloud platforms, SaaS applications, Kubernetes environments, APIs, security controls, compliance signatures, and AI-driven security capabilities. You will work across AWS, Azure, GCP, and Oracle Cloud while ensuring product functionality, security, reliability, scalability, and compliance.
The role requires strong analytical and problem-solving skills, with an emphasis on automation-first testing, API validation, continuous testing, security testing, and AI-assisted quality engineering.
Responsibilities
- Develop and maintain automated functional, API, regression, integration, security, and end-to-end test suites.
- Build automation using Python, Java, Bash/Shell, REST APIs, and automation frameworks.
- Validate cloud security configurations, compliance signatures, and security policies across multi-cloud environments.
- Automate testing for AWS, Azure, GCP, Kubernetes, containers, microservices, and IaC.
- Integrate automated tests into CI/CD pipelines using Jenkins, or similar tools.
- Leverage Generative AI and AI-assisted tools for test-case generation, code creation, test-data generation, log analysis, defect investigation, documentation, and productivity improvement.
- Perform security and compliance testing against CIS, NIST, PCI-DSS, DISA/STIG, CSA-CCM, and MITRE ATT&CK.
- Collaborate with development, security, DevOps, and product teams to improve quality, automation coverage, and release efficiency.
Additional Plus Competencies
- Security Certifications like CEH, CISA, CISM, CISSP, ISC2-CCSP
- Cloud platform-based certifications like AWS/Azure/GCP Certified Developer/Solution Architect
- Exposure to Security benchmarks like the CIS, SCCM, DISA, and STIG
- Basic understanding of security standards/mandates like CSA-CCM, NIST, PCI-DSS, MITRE, etc.
Text as Qualys published it; last compared with the original on 11 Nov 2026.
The employer: Qualys
Sells cloud-based vulnerability management, compliance and cloud security; its Pune engineers research threats and test products while architects sell to federal and cloud buyers.
Pay and benefits: Full-time, mostly Pune-based jobs at Qualys (Nasdaq: QLYS), with stock.
Secured production cloud estates?
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Qualys posts a security role
We read Qualys's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.