Lead Security Engineer, Web Development [19 / 10 / 2025]

Job Description :

Lead Security Engineer

Experience Level : 7-10 years

Location : Pune

Come work at a place where innovation and teamwork come together to build products that make the world safe.

Why Qualys

Qualys, Inc. is a pioneer and leading provider of cloud security and compliance solutions. Qualys helps organizations simplify security operations and lower the cost of compliance by delivering critical security intelligence on demand and automating the full spectrum of auditing, compliance and protection for IT systems and web applications via its award winning Qualys Cloud Platform.

About Product Security at Qualys

The Product Security team operates differently. Simply put, build programs and resources to support the company exceed on goals related to the security of the customer experience on Qualys. We prevent problems from becoming incidents.

About This Role

The Qualys Security is looking for an experienced Lead Security Engineer to join the Product Security team in Pune, India. The role will act as a domain security architect for our Java Platform Products. This is an outstanding opportunity to work in the product team of a fast-growing publicly held company. This role is based in Pune, India.

Typical Duties

• Lead web application security initiatives across multiple product lines.
• Develop security automations for product security shift left initiatives.
• Perform application security assessments including static / dynamic code analysis, and manual testing.
• Conduct secure code reviews for applications developed in Java and / or Python, ensuring adherence to best practices and compliance standards.
• Collaborate with development teams to design and implement secure coding practices and provide remediation guidance for identified vulnerabilities.
• Build prototypes of security capabilities, collaborate with developers on improvements, help Qualys ship security in our products.
• Drive threat modeling exercises and identify application design risks.
• Establish and improve processes for integrating security into CI / CD pipelines.
• Serve as a subject matter expert (SME) for web application security, mentoring engineers and raising security awareness.
• Stay current with the latest application security trends, vulnerabilities (e.g., OWASP Top 10, SANS 25), and relevant tooling.
• Partner with product, DevOps, and infrastructure teams to build a comprehensive secure SDLC framework.

What You’ll Bring

Nice to have

Soft Skills