Federal Security Director: FedRAMP & DoD Readiness

Qualys; Raleigh (NC); On-site; USD 210,000 - 320,000; Full time

Job summary

Qualys in Raleigh, NC seeks a Senior Director, Government Product Security Management, to own FedRAMP Moderate/High and future DoD authorizations. You will lead a small federal security team, drive strategic direction, oversee continuous monitoring, and coordinate audits with 3PAO and JAB.

You will partner with Engineering, Ops, and R&D to ensure new Qualys products meet federal compliance before gov deployments, report risk metrics to the CISO and executives, and manage boundary controls and

Qualifications

• 7+ years of leadership in information security or cloud compliance with 5+ years directing FedRAMP/DoD authorizations.
• Deep knowledge of NIST SP 800-53, FedRAMP High baselines, DoD SRG and FISMA.
• Strong cloud architecture understanding, Kubernetes, CI/CD, and security controls in SaaS.
• U.S. Citizenship and US residence required.

Responsibilities

• Direct strategic roadmap and operation for FedRAMP Moderate/High.
• Lead DoD IL4/IL5 readiness and future authorization efforts.
• Manage the Senior Federal Security Analyst & ISSO and oversee ConMon, POAM, and incident response.
• Serve as executive interface for 3PAO audits, JAB reviews, and agency communications.
• Collaborate with DevOps, SRE, Platform Eng, and R&D to ensure compliance before government deployments.
• Develop dashboards and risk metrics for VP Product Security, CISO, and executives.
• Enforce change control, FIPS cryptography, and boundary isolation standards.

Skills

FedRAMP leadership

DoD authorizations leadership

Executive communication

Team leadership

NIST/FISMA knowledge

Citizenship compliance

Job description

Qualys in Raleigh, NC seeks a Senior Director, Government Product Security Management, to own FedRAMP Moderate/High and future DoD authorizations. You will lead a small federal security team, drive strategic direction, oversee continuous monitoring, and coordinate audits with 3PAO and JAB.

You will partner with Engineering, Ops, and R&D to ensure new Qualys products meet federal compliance before gov deployments, report risk metrics to the CISO and executives, and manage boundary controls and