Signature Qa Engineer , Cloud Security Compliance Job in Qualys, Inc.

Description

As a Signature QA Engineer you will be part of an engineering team that is responsible for the research, development, and delivery of compliance signatures for Cloud security product. In this team you will work on numerous Cloud platforms, Cloud Services, SAAS applications and security standards like CIS, CSA-CCM, NIST, DISA, PCI-DSS and help customers assess the configurations and compliance.

Responsibilities:

Understand end-to-end testing requirements and maintain test plan for functionality and system testing.
Communicate test results to identify risks, dependencies and escalate the same in timely manner.
Automate test cases with an established automated framework.
Execute automation suite in QA and Production environments and publish the results.
Seek for continuous improvement in existing automation establishments.
Develop and maintain test plans and test cases for automated feature list.
Along with automation, create expertise in assigned platform component, product or feature area.
Track updates pushed by cloud service provider on respective supported cloud platforms/services
Keep updates with industry standards and features set for systems and platform compliance.

Qualifications:

Good knowledge of any public or private Cloud platform.
Hands on experience with cloud formation, terraform, Jenkins
Minimum 1-3 years of experience in testing distributed backend software architectures.
Hand-on experience in Java programming and/or Python is required.
Hands on experience of Selenium, TestNG, RestAssured.
Knowledge and understanding with Cloud services/Platforms and various cloud service provider offerings (AWS, Azure, Google)
Comfortable with CI/CD build processes and managing QA Environments as well as working with build management tools like Git, Bamboo, Jenkins.

Pluses:

Security Certifications like: CEH, CISA, CISM, CISSP, ISC2-CCSP
Cloud platform-based certifications like: AWS/Azure/GCP Certified Developer/Solution Architect
Exposure to Security benchmarks like CIS or SCCM, DISA and STIG
Basic understanding of security standards/mandates like CSA-CCM, NIST, PCI-DSS etc.