Vulnerability Detection Engineer Qualys

Company

Qualys, the leading provider of Software as a Service (SaaS) vulnerability management and policy compliance solutions, helps organizations of all sizes discover vulnerabilities, ensure regulatory compliance and prioritize remediation according to business risk - with no infrastructure to deploy or manage. QualysGuard, the company's flagship on demand service, conducts automated security audits and provides the quickest route to neutralize worms and other emerging threats. Distributed scanning capabilities and unprecedented scalability make QualysGuard the ideal choice for both SMB's and large, distributed organizations. eBay, Oracle, Cigna and McDonald's are just a sample of our 250 Fortune 1000 and 3500 + customers.

As a Vulnerability Detection Engineer you will be part of a motivated engineering team that is responsible for the research, development, and delivery of vulnerability signatures in the QualysGuard on demand security service. This opening is your opportunity to work in the rapidly expanding field of computer security, in a pre-IPO company with excellent customer ratings and outstanding growth rates.

Responsibilities

Create signatures for the QualysGuard product to detect vulnerabilities in the areas of Databases, Applications, Operating System, TCP/IP Protocols and network devices. Outstanding problem solving and troubleshooting skills are a must, as solutions to many problems might not be obvious. A vulnerability detection engineer should also spend a proportion of time keeping up with current vulnerabilities, attacks and countermeasures.

Qualifications

• MS in Computer Science or 3 years of industry experience in network and systems security.
• Proficient with regular expressions and scripting languages.
• In-depth knowledge of TCP/IP, HTTP, FTP, SSH, SSL and SMTP protocols.
• System administrator experience on Windows or Unix platforms.
• Strong understanding of VPN, Firewalls, Intrusion detection system (IDS).
• Programming and scripting languages like Lua, Perl, PHP
• Excellent written and verbal communication skills.

Additional Plus Competencies

• Experienced in the use of vulnerability scanners, IDS and open source security tools.
• CISSP or SANS GIAC certifications.