Senior Application Security Analyst
The full posting
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
You will be acting as a subject matter expert to implement various automated and manual techniques and detailed penetration testing procedures that will cover all aspects of application security. You will apply your web security and penetration testing experience to thoroughly analyze our Qualys cloud platform for security vulnerabilities. You will work closely with our development teams to define the application security best practices, perform software architecture and design reviews, conduct black box and white box security testing, and support the identification, interpretation, and remediation of vulnerabilities across Qualys platform.
Responsibilities
- Serve as the domain expert to assess web applications for security risks
- Perform manual and automated scanning and security analysis QualysGuard platform to find web application vulnerabilities
- Lead ethical hacking and penetration testing sessions and remediation efforts
- Work with engineering teams during application development process to adopt secure design and coding practices
- Develop and extend tools that support investigation and improve web application security posture
- Collaborate with other security and product experts in Qualys to add new capabilities to QualysGuard product suite.
Education: Bachelors/Masters degree in Engineering, Information Security, Information Assurance, Network Security or related field
Experience: Minimum 5 years of strong application security experience with thorough understanding of web application vulnerabilities.
Candidate should have exposure toward AI Appplication penetration testing (Not use of AI alone) and Agentic Implemenation for Security assessment.
Source Code Review / SAST either Manual of Automated is must. A passion for ethical hacking and vulnerability research
Knowledge of secure coding principles and practices for web applications Hands-on experience with application security assessment methodologies and tools
Knowledge of cloud-based infrastructure and how it affect security implementations
Excellent problem solving and analytical skills; outstanding oral and written communication skills Self-motivation and the ability to work under minimal supervision are a must
Programming knowledge - PHP, Java, Python, or Go
Text as Qualys published it; last compared with the original on 11 Nov 2026.
The employer: Qualys
Sells cloud-based vulnerability management, compliance and cloud security; its Pune engineers research threats and test products while architects sell to federal and cloud buyers.
Pay and benefits: Full-time, mostly Pune-based jobs at Qualys (Nasdaq: QLYS), with stock.
Let security teams come to you
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Qualys posts a security role
We read Qualys's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.