Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Job Description: Senior Director of Subject Matter Expert - CTEM, RBVM, ASPM - Risk Operation Center (ROC)
Date posted: March 2026
About the job
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Senior Director of Subject Matter Expert - CTEM, RBVM, CAASM - Risk Operation Center
Location: Foster City, CA, USA
Organization: Product GTM & SME
Reports To: SVP of Product Management
Role Overview
We are seeking a
Senior Director - Subject Matter Expert (SME) to lead deep technical expertise and field architecture & deployment for the Qualys
Enterprise TruRisk Management (ETM) platform and
Risk Operations Center (ROC) operating model.
This role is a
hands-on technical SME leadership position responsible for driving the architecture, deployment strategy, and customer adoption of Qualys exposure management solutions including:
โข Enterprise TruRisk Management (ETM)
โข Risk Operations Center (ROC)
โข Cyber Risk Quantification (CRQ)
โข VMDR (Vulnerability Management Detection & Response)
โข CyberSecurity Asset Management (CSAM)
โข External Attack Surface Management (EASM)
The Senior Director will serve as a
technical authority and practitioner working directly with engineering, product management, and enterprise customers to operationalize
Continuous Threat Exposure Management (CTEM) and modern
risk-centric security operations - ROC
This role will lead a
small elite team of 5-6 technical SMEs responsible for architecture guidance, field enablement, customer advisory, leading POC/POV and feedback into the product roadmap.
Key Responsibilities
Technical Leadership & Architecture
Act as the
deep technical authority for Qualys exposure management architecture including:
โข ETM risk correlation and prioritization
โข ROC operational workflows
โข Vulnerability management and remediation orchestration
โข ASPM & CNAPP integration to Exposure Management Platform (ETM)
โข Cross-domain exposure analytics across infrastructure, cloud, identity, and applications
Design and guide enterprise implementations that integrate:
โข VMDR vulnerability telemetry
โข Asset intelligence from CSAM
โข External attack surface data from EASM
โข Cloud posture insights from TotalCloud
โข Application security insights from ASPM / TotalAppSec
โข
3rd Party (Non-Qualys) Ecosystems such as CNAPP, AppSec, IoT/OT, Identity, CMDB, etc.
Lead the development of
reference architectures and deployment models for large global enterprises.
Outbound Customer and Sales enablement Responsibilities:
- Develop sales enablement collateral, including customer product presentations, decks and demo scripts.
- Help develop messaging and product positioning in collaboration with PM and PMMs leads.
- Research the competitive landscape, determine how competitors are positioned and develop optimized positioning strategies and support documents for the CTEM, CAASM, CRQ, and RBVM.
- Educate the sales team on how to address competitors in the field with Qualys' unique positioning.
- Develop collateral and be an expert on CTEM and RBVM technology and terminology.
- Be an expert in explaining the product to sales and be involved with demos and presentations to customers.
- Foster strong relationships with customers to gather feedback, understand pain points, and translate insights into product requirements.
- Design, deliver, and train the Qualys Sales Team on value-based demonstration of our products
Hands-On Platform Expertise
Work directly with engineering and product teams to:
โข Prototype new ETM and ROC capabilities
โข Validate exposure management workflows
โข Test integrations with DevSecOps pipelines and CI/CD environments
โข Provide technical feedback on product architecture and scalability
Provide deep expertise in:
โข Vulnerability lifecycle management
โข Exposure prioritization and TruRisk scoring
โข Attack path analysis
โข Cyber Risk quantification
โข Remediation orchestration
โข ASPM and application risk correlation.
Risk Operations Center (ROC) Strategy
Define how enterprises implement the
Risk Operations Center model using Qualys ETM.
Develop best practices and implementation playbooks for:
โข Cross-team risk prioritization
โข Exposure triage workflows
โข Remediation SLAs
โข Executive risk reporting
โข Operationalizing CTEM across security teams.
Customer Advisory & Strategic Engagement
Act as a
trusted technical advisor to CISOs, security architects, and DevSecOps leaders.
Lead architecture workshops, executive technical briefings, strategic customer advisory sessions and proof-of-concept deployments.
Support major strategic and enterprise accounts globally and complex deployments
Team Leadership
Lead, mentor, and grow a team of
5-6 highly skilled technical SMEs, setting clear priorities, fostering a high-performance culture, and ensuring a strong execution rhythm.
Build and deliver scalable and repeatable playbooks for:
โข Field architecture guidance
โข ETM and ROC technical enablement
โข ASPM, CNAPP adoption and DevSecOps integration
โข Product feedback and innovation.
Build a
center of excellence for exposure management architecture within the company
Product Collaboration
Partner closely with Product Management and Engineering to:
โข Influence product roadmap
โข Validate new capabilities
โข Translate customer needs into platform improvements
โข Accelerate innovation across exposure management and application security.
Required Qualifications
โข 12-15+ years' experience in cybersecurity architecture, product strategy, or technical leadership
โข Deep expertise in
vulnerability management and exposure management platforms
โข Strong hands-on experience with
application security,ASPM, and CNAPP ecosystems
โข Experience designing security architectures for
large enterprise environments
โข Strong knowledge of
cloud platforms (AWS, Azure, GCP)
โข Familiarity with
DevSecOps pipelines and developer security workflows
โข Experience integrating security platforms across:
- Exposure Management
- Vulnerability management
- Application security
- Cloud security
- Asset management
- Identity security.
โข Demonstrated ability to lead technical teams and influence cross-functional stakeholders.
Preferred Experience
โข Experience working with platforms similar to Qualys and competitive vendor landscape focusing on RBVM, CTEM, AppSec, ASPM, CNAPP etc.
โข Familiarity with frameworks such as:
- Continuous Threat Exposure Management (CTEM)
- Zero Trust
- NIST Cybersecurity Framework
- MITRE ATT&CK.
โข Experience working directly with enterprise CISOs and security leadership teams.
The salary range for this position is $200,000 - $235,000 per year. Final compensation will be determined based on several factors, including but not limited to skills, relevant experience, and work location. Please note this range reflects base salary and does not include incentive compensation or potential equity grants. We also offer a comprehensive and highly competitive benefits package.
Qualys is an Equal Opportunity Employer, please see our EEO policy.