{"id":57111,"url":"https://alion.io/job/qualys-senior-security-engineer-aiml","title":"Senior Security Engineer, AI/ML","company":{"id":18966,"name":"Qualys","domain":"qualys.com","url":"https://alion.io/company/qualys","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Foster City, United States"],"countries":["US"],"hiring_countries":[],"hiring_countries_total":0,"salary":{"min":115000,"max":140000,"currency":"USD","period":"year","gross":null,"usd_annual":140000},"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":true,"technologies":[{"name":"Agile","optional":false},{"name":"AI Agents","optional":false},{"name":"CrewAI","optional":false},{"name":"Embeddings","optional":false},{"name":"FAISS","optional":false},{"name":"Fine-tuning","optional":false},{"name":"Hallucination","optional":false},{"name":"Hugging Face","optional":false},{"name":"LlamaIndex","optional":false},{"name":"LLM","optional":false},{"name":"Machine Learning","optional":false},{"name":"Multi-Agent Systems","optional":false},{"name":"OpenAI","optional":false},{"name":"Pandas","optional":false},{"name":"Pinecone","optional":false},{"name":"PoC Library","optional":false},{"name":"Python","optional":false},{"name":"Qdrant","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"RAG","optional":false},{"name":"Red Teaming","optional":false},{"name":"Scikit-learn","optional":false},{"name":"SQL","optional":false},{"name":"TensorFlow","optional":false},{"name":"AWS","optional":true},{"name":"Azure","optional":true},{"name":"CI/CD","optional":true},{"name":"Claude","optional":true},{"name":"Falcon","optional":true},{"name":"GCP","optional":true},{"name":"GPT-4","optional":true},{"name":"Guardrails AI","optional":true},{"name":"Mistral","optional":true},{"name":"OWASP","optional":true},{"name":"STRIDE","optional":true},{"name":"Threat Modeling","optional":true}],"status":"live","first_seen_at":"2026-06-30T00:00:00Z","employer_posted_date":"2026-06-30","last_verified_at":"2026-10-17T08:12:06Z","board_verified":true,"closed_at":null,"days_open":109,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":109},"description":"Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!\nCompany Overview\nQualys is a leading provider of cloud-based security and compliance solutions, processing vast amounts of data to help our global customers secure their networks, devices, and applications. With a strong focus on innovation and scale, Qualys empowers organizations to achieve continuous security and compliance through real-time visibility and analytics. As we continue to grow, we are looking for passionate and skilled professionals to join our mission in redefining the future of cybersecurity.\nPosition Overview\nWe are seeking a Senior Security Engineer - AI/ML who sits at the intersection of hands-on AI/ML engineering and offensive security research. You will both build andbreak:designing and deploying GenAI and agentic systems that power next-generation threat detection, while red teaming those same systems to uncover prompt injection exploits, adversarial inputs, model manipulation, and other emerging AI threats.\nThis is a senior, dual-mandate role for an engineer who is equally comfortable orchestrating multi-agent pipelines and RAG architectures as they are tearing them apart to find weaknesses. You will set the technical bar for secure-by-design AI at Qualys, mentor other engineers, and translate research into production hardening strategies.\nKey Responsibilities\nBuild\nBuild and deploy GenAI applications usingLangChain,LlamaIndex, or similar frameworks, and orchestrate agentic AI workflows with tools such asAutoGen,CrewAI, or custom agent-based architectures.\nDesign, train, and evaluate ML models from scratch, spanning both classical ML and deep learning, and develop end-to-end pipelines for ingestion, preprocessing, training, evaluation, and deployment.\nImplement andoptimizeRAG pipelines using embeddings and vector databases (e.g., FAISS, Pinecone,Qdrant), with security and data-leakage controls built in from the start.\nWrite robust backend APIs in Python to serve models, process data, and integrate with cloud infrastructure; monitor model performance, latency, and accuracy in production and iterate continuously.\nBreak\nConduct in-depth research on security vulnerabilities in LLMs and AI systems, including prompt injection, jailbreaks, data leakage, model theft, and adversarial attacks.\nDesign and execute offensive security assessments and red teaming campaigns against GenAI and ML-powered systems, including the agentic pipelines built in-house.\nIdentifyand classify novel threat vectors targeting model inference, training pipelines, and model-serving architectures.\nContribute to and build internal tooling for scanning, fuzzing, and automating LLM vulnerability discovery.\nLead & Communicate\nCollaborate cross-functionally with product and engineering teams to design secure AI-powered features and define hardening strategies.\nDevelop proof-of-concepts, technical whitepapers, or blog posts on emerging threats and best practices; monitor threat intelligence and academic research on AI model security and supply chain risks.\nRepresent Qualys in security and AI research communities through speaking, publishing, or standardization efforts, andmentorengineers on secure AI development.\nRequired Qualifications\n6+ years of combined experience across software engineering / machine learning and security research, penetration testing, or exploit development, with a focus on application or cloud security.\nStrong programming skills in Python, including building APIs and backend components, plus scripting and automation for testing and PoC development.\nExperience training ML models using Scikit-learn, TensorFlow, orPyTorch, and a strong working knowledge of LLM architectures (transformers, embeddings, fine-tuning, RAG).\nHands-on experience withLangChain,LlamaIndex, or other GenAI frameworks, and with building multi-agent or autonomous AI workflows.\nFamiliarity with GenAI-specific risks such as prompt injection, model evasion, hallucination-based exploits, data leakage, or model theft, and with LLM deployment scenarios (e.g., OpenAI,HuggingFace, custom-hosted models) and their threat surfaces.\nAbility to analyze logs, API interactions, inference responses, and prompt chains toidentifyanomalous or risky behavior.\nWorking knowledge of SQL, Pandas, and large-scale data processing, with experience developing and deploying ML systems in Agile environments.\nStrong analytical mindset, excellent technical writing skills, and familiarity with responsible disclosure practices, bug bounty programs, or security research ethics.\nPreferred Qualifications\nBackground in AI/MLsecurityred teaming or adversarial ML.\nKnowledge of vector database risks, insecure RAG pipelines, model fingerprinting, and AI model supply chain attacks.\nExperience using or contributing to tools such asAutoGen,CrewAI,MetaGPT, Guardrails.ai, LLM Guard, or Tracer.\nFamiliarity with LLMs such as GPT-4, Claude, Mistral,LLaMA, or Falcon, and integrating them via APIs.\nExperience with cloud platforms (AWS, GCP, Azure), containerized deployments, andMLOpstooling for monitoring, retraining, and CI/CD automation.\nFamiliarity with Secure SDLC and threat modeling frameworks (e.g., STRIDE, MITRE ATLAS) and AI-specific security checklists.\nPublications or presentations at conferences such as Black Hat, DEF CON, USENIX,NeurIPS, or OWASP, and contributions to AI/ML projects in security, compliance, or enterprise applications.\nOur Work Environment\nCollaborative & Transparent: We use virtual collaboration and pairing tools to share ideas openly. Siloed work is discouraged - teamwork is our strength.\nAgile & Flexible: We focus on delivering incremental value, adapting processes only when they serve our goals.\nDiverse & Inclusive: We believe in building teams with diverse perspectives, which fuels creativity and innovative problem-solving.\nPeople-Focused: Our people are our mostvaluable asset. We invest in personal growth and align individual strengths to companyobjectives.\nWhy Join Us?\nLeadership Impact: Help drive a security-first culture and shape the defense landscape of next-generation AIsystems atglobal scale.\nCutting-EdgeTechnology: Build and harden real-world LLM, GenAI, and agentic systems on scalable, cloud-native infrastructure.\nProfessional Growth: Access broad resources, mentorship, certifications, and exposure tocutting-edgeresearch.\nInclusive Culture: Join a team that values diverse thinking, critical research, openness, and continuous improvement.\nCompetitive Compensation: We offer a comprehensive benefits package, including healthcare, retirement plans, and more.\n******************************************************************************************************************\nThe salary range for this position is $115,000 - $140,000 per year. Final compensation will be determined based on several factors, including but not limited to skills, relevant experience, and work location. Please note this range reflects base salary and does not include incentive compensation or potential equity grants. We also offer a comprehensive and highly competitive benefits package.\nQualys is an Equal Opportunity Employer, please see our EEO policy.","description_format":"text","description_chars":7238,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":["Equity","Retirement plans"],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Cybersecurity","Endpoint Security","Information Security"],"lifecycle":[{"event":"open","at":"2026-06-30T00:00:00Z"}],"visa":[{"country":"US","licensed_sponsor":true,"evidence":"H-1B filings in 12 months: 58 · green card filings: 21","filings_12m":58,"filings_prev_12m":62,"green_card_filings_12m":21,"median_offered_wage_usd":139842,"route":null,"cap_exempt":false,"checked_at":"2026-10-15T11:24:14+00:00","sources":["US Department of Labor: LCA disclosure data (H-1B, H-1B1, E-3)","US Department of Labor: PERM disclosure data (green cards)"],"filings_for_role_12m":6}],"liveness":{"score":22,"band":"cold","label":"Long shot","p_open":1,"p_active":0.608,"p_room":0.36,"age_days":109,"expected_fill_days":59,"reasons":["conf:31","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-17T05:46:00Z"},"pay":{"stated_usd_annual":140000,"is_top_pay":false},"html_url":"https://alion.io/job/qualys-senior-security-engineer-aiml","json_url":"https://alion.io/job/qualys-senior-security-engineer-aiml.json","meta":{"generated_at":"2026-10-17T17:51:54Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":407,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-18T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18966},"rest":"https://alion.io/mcp/rest/get_company?id=18966"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fqualys-senior-security-engineer-aiml"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fqualys-senior-security-engineer-aiml"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fqualys-senior-security-engineer-aiml"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/qualys-senior-security-engineer-aiml\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fqualys-senior-security-engineer-aiml"}]}