Base Career helps you apply smarter for this job.
Key skills for this role
Research and analyze security configuration requirements for Linux, Windows, macOS, databases, applications, and network devices.
Study industry security benchmarks such as CIS Benchmarks and DISA STIG to understand secure configuration requirements.
Help create and maintain technical compliance controls based on security best practices.
Assist in mapping security controls to frameworks such as NIST , MITRE ATT&CK , PCI-DSS , ISO 27001 , and other compliance standards.
Document control descriptions, rationale, risk, and remediation guidance.
Research emerging technologies and understand their security architecture.
Identify important security configuration settings and recommend secure configurations.
Continuously learn new technologies and industry security standards.
Review and update compliance content as security benchmarks and frameworks evolve.
Understand existing Bash/Shell scripts used for compliance checks and perform basic modifications when required.
Assist in validating compliance controls through testing and technical analysis.
Work closely with Product, Development, QA, and Infrastructure teams.
Participate in technical discussions and contribute to improving compliance content quality.
Skip the repetitive application forms
Install the Base Career Chrome Extension and autofill job applications across major job boards with your profile.
Trusted by over 500,000 job seekers on Base Career
More from this employer
, IND
Qualys is seeking a Senior Software Engineer to design, develop, and test scalable cloud-based software and distributed microservices. The role requires strong Java, Spring Boot, database, Kubernetes, Docker, and continu
Pune, IND
, IND
Pune, IND
Pune, IND
Pune, IND
Pune, IND
Pune, IND
, IND
Support internal teams by analyzing compliance gaps and researching technical solutions.
Basic understanding of operating system security concepts.
Familiarity with security hardening standards such as CIS Benchmarks and DISA STIG .
Awareness of security frameworks including: NIST ISO 27001 PCI-DSS MITRE ATT&CK
NIST
ISO 27001
PCI-DSS
MITRE ATT&CK
Basic understanding of networking concepts.
Ability to read, understand, and troubleshoot basic Bash/Shell scripts .
Basic scripting knowledge to make small modifications to existing scripts.
Familiarity with Regular Expressions (Regex) is desirable.
Exposure to any of the following is a plus:
Windows administration
macOS
Databases
APIs or Postman
Microsoft Security Compliance Toolkit (SCT)
Cloud-based security, compliance, and cyber risk management platform.
Visit company websiteJobs and hiring trendsFull-time
Entry · 0+ years experience
Onsite
Apply faster on company sites with our extension.