Senior Web Application Security Engineer
qlys_in qualys security techservices private
📍 pune india🕐 1mo ago🔗 workday
Job Description
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
**Responsibilities**
In this position, you will primarily be researching and implementing detections for vulnerabilities on all the latest web application technologies. You will also be expected to fine-tune existing logic and payloads to detect vulnerabilities and CVEs with zero false positives for the Qualys Web Application Security product. Efficient problem-solving and troubleshooting skills are necessary, as well as using the latest tools in the industry.
**Required Skills:**
\* 4-8 years of industry experience in web application security
\* Create exploits, proof-of-concept for web application vulnerabilities
\* Strong JavaScript programming skills
\* Knowledge of HTTP protocol (Requests, responses, Cookies, etc.)
\* Understanding of web application vulnerabilities, OWASP Top 10 in Web Applications, API, and LLMs
\* Exposure to DAST/BlackBox tools
\* Web application security scanning tools like BURP/ZAP, SQLMap, CURL
\* Experience with network analysis tools and analysis of packet captures.
\* Proficient with regular expressions.
\* System administrator experience on Windows or Unix platforms.
\* Strong analytical and problem-solving skills
\* Passion for web security and attention to detail
\* Experience with scripting languages, including Python and Bash
\* Exposure to JAVA programming
\* Experience with Selenium, Postman scripting
\* Experience with Metasploit/Nessus exploits (especially HTTP-related )
\* Experience with web application firewalls (WAF) rules, ModSecurity
\* Exposure to WEB 2.0, XML/XPath, JSON, Swagger
\* Database/SQL knowledge
\* Experienced in the use of various scanners and open-source security tools.
\* Experience in developing security-related tools/programs.
\* Ability to work independently
\* Published research
\* Security certifications
**Education**
Bachelor’s / Master’s degree in Computer Science, Engineering, or equivalent practical experience