Qualys - Senior Penetration Tester - Software Quality Assurance

Job Description :

We are seeking a skilled Penetration Tester to assess and enhance the security of our cross-platform executable Qualys Cloud Agent.

This agent is responsible for system monitoring, data collection, and secure communication with a cloud platform.

Operating across Unix, Windows, and macOS environments, the agent plays a critical role in our security and compliance solutions.

The ideal candidate will uncover vulnerabilities, simulate attack scenarios, and work with our teams to fortify the system against threats.

Key Responsibilities :

Cross-Platform Agent Testing :

• Conduct comprehensive security testing of the executable agent, ensuring robust functionality across Unix / Linux, Windows, and macOS platforms.
• Identify and exploit vulnerabilities in the agents runtime behavior, system interactions, and interprocess communications.
• Test agent privilege management and evaluate risks of escalation or exploitation.

Data Collection and Handling :

Communication Security :

Test the agents secure communication mechanisms with the cloud server, focusing on :

Reverse Engineering and Exploitation :

System Security Evaluations :

introduce risks (e.g., open ports, exploitable configurations).

Reporting and Remediation :

Required Qualifications :

Technical Expertise :

Tools & Scripting :

Experience :

Certifications (Preferred) :

Preferred Qualifications :

(ref : hirist.tech)