Vice President, Product Security

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Executive leader responsible for defining and executing enterprise Product Security strategy across cloud-native SaaS platforms, secure software development, regulatory compliance, and multi-cloud environments. Leads global security engineering, architecture, and compliance teams while partnering with Product, Engineering, Cloud Operations, Legal, and executive leadership.

• 12+ years of cybersecurity, product security, application security, cloud security, or security architecture experience, including 7+ years in senior leadership roles.
• Proven success building and scaling global Product Security organizations.
• Experience leading directors, managers, architects, and security engineering teams.
• Strong executive communication skills with Boards, C-suite leaders, customers, auditors, and regulators.
• Experience managing security strategy, budgets, forecasting, vendors, and enterprise security programs.
• Ability to influence product and engineering roadmaps across cross-functional organizations.

• Deep expertise in Product Security, Application Security, Cloud Security, Dev Sec Ops , SSDLC, and software supply chain security.
• Experience implementing:
  • Security-by-Design
  • Threat Modeling
  • Secure Coding Standards
  • Vulnerability Management
  • Red Team Programs
  • Bug Bounty Programs
  • SBOM and Supply Chain Security
  • Secure CI/CD Pipelines
  • Container and Kubernetes Security
• Strong knowledge of Zero Trust, OAuth2, OpenID Connect, SAML, PKI, Secrets Management, and PAM.
• Expertise with NIST, OWASP, CIS Controls, SOC 2, and ISO 27001 frameworks.

• 10+ years supporting U.S. Federal cybersecurity and compliance programs.
• Proven experience achieving and maintaining FedRAMP Moderate and High authorizations.
• Strong knowledge of NIST SP 800-53, FedRAMP Continuous Monitoring, POA&M management, and government assessment processes.
• Experience supporting CMMC 2.0, NIST 800-171, DFARS requirements, and DoD cloud environments (IL4/IL5/IL6).
• Familiarity with DISA STIGs, CC SRG, CUI, and regulated government workloads.
• Experience supporting NIAP/Common Criteria certification initiatives preferred.

• 15+ years securing enterprise-scale cloud platforms.
• Hands-on expertise across AWS, Azure, GCP, and OCI.
• Experience with cloud identity, security monitoring, key management, container security, governance, and compliance frameworks.
• Track record implementing consistent security controls across multi-cloud and hybrid-cloud environments.

• CISSP, CCSP, GIAC, SABSA, or equivalent certifications.
• Prior experience as VP Product Security, Head of Product Security, Chief Product Security Officer, or comparable senior security executive.
• Experience in publicly traded technology companies and Board-level cybersecurity reporting.
• M&A security due diligence and post-acquisition integration experience.
  
  Background supporting cybersecurity, cloud security, vulnerability management, endpoint security, or SIEM platforms.

Qualys is an Equal Opportunity Employer, please see our EEO policy.