Compliance Research Analyst at Qualys Inc

pune, maharashtra, India -

Full Time

Start Date

Immediate

Expiry Date

23 Aug, 26

Salary

0.0

Posted On

25 May, 26

Experience

2 year(s) or above

Remote Job

Yes

Telecommute

Yes

Sponsor Visa

Skills

Linux Hardening, Python, Bash Scripting, PowerShell, CIS Benchmarks, DISA STIG, SELinux, Auditd, NIST Framework, PCI-DSS, ISO 27001, LLM APIs, Prompt Engineering, Regular Expressions, MITRE ATT&CK, Compliance Analysis

Industry

Computer and Network Security

Description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! We are looking for a motivated and detail-oriented Compliance Research Analyst with 2–3 years of experience to join our organization. The ideal candidate has foundational to intermediate hands-on knowledge of Linux systems, scripting, and security frameworks, along with a growing interest in automation and AI-powered tooling. This role involves research, analysis, and scripting to support the development and maintenance of compliance policies, technical standards, and target configuration as per CIS/DISA benchmarks. We value curiosity, a willingness to learn, and a strong work ethic over perfection. Key Responsibilities Technical Research & Policy Support Assist in analyzing and documenting compliance controls across platforms including Windows, Linux, macOS, and network devices. Support the development of technical standards and compliance policies based on frameworks such as CIS, DISA STIG, NIST, PCI-DSS, ISO, and HIPAA. Help map controls to industry frameworks (e.g., MITRE, NIST) and document control categories, criticality ratings, and remediation steps. Linux Systems & Hardening Analyze, interpret, and implement Linux security hardening and compliance configuration requirements across enterprise server environments. Work with Linux systems across enterprise distributions including RHEL, Ubuntu, CentOS, and Debian. Configure and manage disk partitioning, filesystems, mount options, and LVM layouts for secure system deployments. Configure and maintain SELinux in enforcing mode, including policy configuration, contexts, and validation of confined services. Harden Linux systems by configuring kernel parameters, disabling unnecessary kernel modules, and applying secure sysctl settings. Configure and manage auditd services, audit rules, log retention policies, and audit log analysis to support security monitoring, traceability, and compliance reporting. Implement secure authentication and access control mechanisms including SSH hardening, PAM configuration, sudo policies, password controls, account restrictions, and cron/at access management. Work with critical Linux configuration files including /etc/passwd, /etc/shadow, sudoers, SSH configuration, PAM modules, fstab, systemd services, and audit configurations. Write and maintain Bash/shell scripts to automate compliance checks, remediation activities, configuration validation, and reporting tasks. Research security hardening updates, understand control intent and rationale, and document implementation approaches, exceptions, and remediation procedures for Linux systems. Automation & AI-Assisted Tooling Write and maintain automation scripts using Python, Shell scripting, and PowerShell to support compliance workflows. Explore and apply LLM APIs (e.g., OpenAI, Anthropic Claude) to assist with research, content generation, and task automation. Support the development of AI-assisted tools and basic agent workflows under guidance from senior team members. Learn and apply prompt engineering techniques to interact effectively with AI models for compliance use cases. Contribute to automation libraries and reusable script templates for compliance checks and remediation. Content Development & Collaboration Develop and maintain compliance scripts using PowerShell, Python, and shell scripting. Update and improve existing content as benchmarks, policies, and customer requirements evolve. Work with cross-functional teams (Development, QA, Infrastructure) to deliver quality output on time. Support customers by helping identify and address compliance gaps with practical, well-documented solutions. Required Technical Skills Linux 2+ years of hands-on experience including: At least one RHEL-based distribution (RHEL / CentOS / Rocky / Alma) At least one Debian-based distribution (Ubuntu / Debian) Working knowledge of disk partitioning, filesystems, and mount management Basic to intermediate understanding of SELinux modes and contexts (good to have) Familiarity with kernel parameter tuning via sysctl Experience with Linux auditing (auditd, audit rules, ausearch, aureport) Exposure to Linux system hardening guidelines (CIS Benchmarks or DISA STIG) Ability to read, write, and troubleshoot Bash/shell scripts Comfort working with system files: /etc/passwd, sudoers, SSH config, PAM, cron, syslog Automation & Scripting (Required) Python scripting (preferred for automation) Basic to intermediate proficiency Ability to independently write functional automation scripts Used in place of shell where more effective PowerShell scripting for Windows-based or cross-platform tasks Experience using AI-assisted development (“vibe coding”) tools such as GitHub Copilot, ChatGPT, Claude, Cursor, or similar tools to accelerate scripting, troubleshooting, research, and automation workflows Familiarity with or curiosity about LLM APIs (OpenAI, Anthropic Claude, or similar) and prompt-driven automation workflows Familiarity with or curiosity about LLM APIs (OpenAI, Anthropic Claude, or similar) General Technical Skills Foundational knowledge of Windows, Linux, macOS, networking, and database systems Basic to intermediate proficiency in regular expressions (Regex) Awareness of industry hardening standards (CIS, DISA STIG, Microsoft SCT) Familiarity with security frameworks: NIST, ISO 27001/27002, PCI-DSS, GDPR, etc. Basic understanding of the MITRE ATT&CK framework Exposure to APIs and tools like Postman is a plus Required Soft Skills Strong written and verbal communication skills Eager to learn, grow, and take on new challenges Team player who can collaborate in a distributed team environment Organized and attentive to detail with a commitment to quality Ability to manage assigned tasks independently with minimal supervision Preferred Qualities Self-motivated with a genuine interest in security and compliance Comfortable asking questions and learning from feedback Adaptable to changing requirements and priorities Interest in AI/ML trends and how they apply to security and automation Join our talent community and receive the latest Qualys news, content, and be first in line for new job opportunities. Join our Talent Community! Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.

Responsibilities

The role involves researching and implementing security hardening and compliance configurations across various Linux distributions and network devices. It also focuses on automating compliance workflows using Python, Shell, and AI-powered tooling.