{"id":57099,"url":"https://alion.io/job/qualys-senior-web-application-security-engineer","title":"Senior Web Application Security Engineer","company":{"id":18966,"name":"Qualys","domain":"qualys.com","url":"https://alion.io/company/qualys","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Pune, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":17500,"max_usd":37000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":11},"experience_years_min":4,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Bash","optional":false},{"name":"JavaScript","optional":false},{"name":"Metasploit","optional":false},{"name":"ModSecurity","optional":false},{"name":"Nessus","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"Postman","optional":false},{"name":"Python","optional":false},{"name":"Qualys Cloud Platform","optional":false},{"name":"Selenium","optional":false},{"name":"SQL","optional":false},{"name":"SQLmap","optional":false},{"name":"Swagger","optional":false},{"name":"Unix","optional":false},{"name":"Windows","optional":false}],"status":"live","first_seen_at":"2026-08-04T00:00:00Z","employer_posted_date":"2026-08-04","last_verified_at":"2026-10-15T21:53:39Z","board_verified":true,"closed_at":null,"days_open":73,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":73},"description":"Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!\nResponsibilities \nIn this position, you will primarily be researching and implementing detections for vulnerabilities on all the latest web application technologies. You will also be expected to fine-tune existing logic and payloads to detect vulnerabilities and CVEs with zero false positives for the Qualys Web Application Security product. Efficient problem-solving and troubleshooting skills are necessary, as well as using the latest tools in the industry.\nRequired Skills: \n* 4-8 years of industry experience in web application security\n* Create exploits, proof-of-concept for web application vulnerabilities\n* Strong JavaScript programming skills\n* Knowledge of HTTP protocol (Requests, responses, Cookies, etc.)\n* Understanding of web application vulnerabilities, OWASP Top 10 in Web Applications, API, and LLMs\n* Exposure to DAST/BlackBox tools\n* Web application security scanning tools like BURP/ZAP, SQLMap, CURL\n* Experience with network analysis tools and analysis of packet captures.\n* Proficient with regular expressions.\n* System administrator experience on Windows or Unix platforms.\n* Strong analytical and problem-solving skills\n* Passion for web security and attention to detail\n* Experience with scripting languages, including Python and Bash\n* Exposure to JAVA programming\n* Experience with Selenium, Postman scripting\n* Experience with Metasploit/Nessus exploits (especially HTTP-related )\n* Experience with web application firewalls (WAF) rules, ModSecurity\n* Exposure to WEB 2.0, XML/XPath, JSON, Swagger\n* Database/SQL knowledge\n* Experienced in the use of various scanners and open-source security tools.\n* Experience in developing security-related tools/programs.\n* Ability to work independently\n* Published research\n* Security certifications\nEducation\nBachelor’s / Master’s degree in Computer Science, Engineering, or equivalent practical experience","description_format":"text","description_chars":1995,"description_truncated":false,"requirements":{"experience_years_min":4,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":{"level":"bachelor","optional":false},"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","Cybersecurity","Endpoint Security","Information Security"],"lifecycle":[{"event":"open","at":"2026-08-04T00:00:00Z"}],"visa":[],"liveness":{"score":31,"band":"fade","label":"Fading","p_open":1,"p_active":0.695,"p_room":0.44,"age_days":73,"expected_fill_days":59,"reasons":["conf:7","velocity","win:tail","crowd:brand"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/qualys-senior-web-application-security-engineer","json_url":"https://alion.io/job/qualys-senior-web-application-security-engineer.json","meta":{"generated_at":"2026-10-16T22:24:08Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":3988,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":18966},"rest":"https://alion.io/mcp/rest/get_company?id=18966"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fqualys-senior-web-application-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fqualys-senior-web-application-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fqualys-senior-web-application-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/qualys-senior-web-application-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fqualys-senior-web-application-security-engineer"}]}