Find a job 
Featured Companies 
Featured Universities 
For Companies At a Glance
- Tasks: Join us to engineer innovative solutions for cyber risk management and enhance customer experiences.
- Company: Qualys, a leader in cloud-based IT security and compliance solutions.
- Benefits: Enjoy remote work flexibility, competitive salary, and opportunities for professional growth.
- Why this job: Make a real impact by transforming complex data into actionable cyber risk insights.
- Qualifications: Strong software engineering skills and a passion for cybersecurity and AI.
- Other info: Dynamic role with opportunities to collaborate directly with industry leaders.
The predicted salary is between 36000 - 60000 £ per year.
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
About Qualys
Qualys, Inc. is a pioneer and leading provider of disruptive cloud-based IT, security, and compliance solutions. Our Enterprise TruRisk Management platform empowers organizations to measure, communicate, and eliminate cyber risk with precision. Qualys’ innovative technologies are trusted by thousands of global organizations.
Position Summary
Qualys is building the future of cyber risk management with Enterprise TruRisk Management (ETM) —a platform that enables organizations to measure, communicate, and eliminate cyber risk across the enterprise. We are seeking a Cyber Risk Engineer (Forward Deployed) to operate at the intersection of engineering, AI, and customer deployment. This role focuses on helping customers rapidly onboard data into ETM by building custom connectors, automating workflows, and applying AI-driven intelligence to deliver the broadest, most accurate, and most actionable view of cyber risk. The Cyber Risk Engineer embeds directly with customers to translate complex, fragmented environments into a unified, operational risk model.
Responsibilities
- Risk Data Engineering & Integration: Lead complex customer onboarding engagements within the Advanced RiskOps Group. Design and build custom connectors, ingestion pipelines, and APIs to integrate data into ETM from various sources including vulnerability and exposure management platforms, EDR/XDR and identity systems, cloud and hybrid infrastructure, CMDBs, business systems, and GRC platforms. Normalize, enrich, and correlate disparate datasets into a unified enterprise risk model.
- RiskOps Automation & Orchestration: Engineer automated RiskOps workflows including continuous data ingestion and validation, risk scoring, prioritization, and trend analysis, ownership assignment and remediation tracking, and executive, board, and regulator-ready reporting. Build orchestration between ETM and downstream systems to operationalize risk decisions.
- AI-Driven Risk Intelligence: Apply AI and LLM-based techniques to enhance accuracy, speed, and clarity of cyber risk insights. Develop capabilities such as asset and identity entity resolution across silos, intelligent mapping of exposures to crown jewels, automated risk narratives aligned to business language, and signal-to-noise reduction across massive security datasets. Partner with ETM platform and data science teams to move successful Q-ARG innovations into core product capabilities.
- Advanced RiskOps Enablement: Support delivery of Q-ARG offerings such as Enterprise Risk Onboarding & Data Foundation builds, Crown Jewel Analysis & Business Impact Assessments, and CTEM operationalization. Translate cyber frameworks (OCTAVE, NIST, FAIR, CTEM) into executable workflows inside ETM.
- Product Feedback & Platform Evolution: Act as the real-world feedback loop between customers and ETM product engineering. Identify systemic data, workflow, and modeling gaps. Help shape ETM roadmap priorities based on operational reality.
- Trusted Advisor to Risk Leaders: Partner with CISOs, Heads of Risk, and RiskOps leaders to operationalize cyber risk programs. Translate technical risk into clear, defensible business insight. Support customers as they mature from visibility to prioritization, decision-making, and action.
Qualifications
- Engineering & Data Expertise: Strong background in software, data, or platform engineering. Experience with Python, Java, Go, or similar languages, REST APIs, webhooks, and asynchronous systems, ETL/ELT pipelines and data normalization. Familiarity with relational, NoSQL, search, or graph-based data platforms.
- Cyber Risk & Security Understanding: Knowledge of cybersecurity domains including vulnerability and exposure management, cloud and hybrid environments, identity and access management, threat modeling and attack paths, and risk frameworks and governance concepts.
- AI & Automation: Hands-on experience using AI/LLMs for data enrichment and summarization, classification and correlation, and decision support and workflow automation. Comfortable prototyping and iterating rapidly in production environments.
- RiskOps Mindset: Comfortable operating in ambiguous, high-impact customer environments. Strong communication skills across technical and executive audiences. Builder mentality with bias toward execution over documentation.
Cyber Risk Engineer (Forward Deployed) employer: Qualys
Contact Detail:
Qualys Recruiting Team
StudySmarter Expert Advice 🤫
We think this is how you could land Cyber Risk Engineer (Forward Deployed)
✨Tip Number 1
Network like a pro! Reach out to folks in the industry, attend webinars, and join relevant online communities. The more connections we make, the better our chances of landing that Cyber Risk Engineer gig!
✨Tip Number 2
Show off your skills! Create a portfolio or GitHub repository showcasing your projects related to cyber risk management. This gives potential employers a taste of what we can bring to the table.
✨Tip Number 3
Prepare for interviews by practising common questions and scenarios specific to cyber risk engineering. We should be ready to discuss how we can help customers operationalise their risk programmes effectively.
✨Tip Number 4
Don’t forget to apply through our website! It’s the best way to ensure your application gets noticed. Plus, it shows we’re serious about joining the team at Qualys!
We think you need these skills to ace Cyber Risk Engineer (Forward Deployed)
Some tips for your application 🫡
Show Your Passion for Cyber Risk: When writing your application, let your enthusiasm for cyber risk management shine through! We want to see how your skills and experiences align with our mission at Qualys. Make it personal and relatable—show us why you’re excited about this role!
Tailor Your Application: Don’t just send a generic application! Take the time to tailor your CV and cover letter to highlight relevant experiences that match the job description. We love seeing how your unique background can contribute to our innovative team.
Be Clear and Concise: Keep your application clear and to the point. Use straightforward language to explain your skills and experiences. We appreciate brevity, so make sure every word counts and showcases your qualifications effectively!
Apply Through Our Website: We encourage you to apply directly through our website. It’s the best way for us to receive your application and ensures you’re considered for the Cyber Risk Engineer position. Plus, it shows you’re proactive and keen to join our team!
How to prepare for a job interview at Qualys
✨Know Your Tech Inside Out
Make sure you brush up on your technical skills, especially in Python, Java, and data engineering concepts. Be ready to discuss how you've used these technologies in past projects, particularly in relation to risk management and automation.
✨Understand Cyber Risk Frameworks
Familiarise yourself with key cyber risk frameworks like OCTAVE, NIST, and FAIR. Be prepared to explain how you would translate these frameworks into actionable workflows within the ETM platform, showcasing your understanding of both technical and business perspectives.
✨Showcase Your Problem-Solving Skills
During the interview, highlight specific examples where you've tackled complex customer onboarding challenges or built custom connectors. Use the STAR method (Situation, Task, Action, Result) to structure your responses and demonstrate your impact.
✨Communicate Clearly and Confidently
Since you'll be working closely with CISOs and risk leaders, practice articulating technical concepts in a way that's easy for non-technical stakeholders to understand. This will show that you can bridge the gap between technical details and business insights effectively.
