Principal Subject Matter Expert, Scanning Technologies

Qualys; Colorado; On-site; USD 140,000 - 175,000; Full time

Benefits offered by this job

Comprehensive benefits package

Incentive compensation

Equity grants

Job summary

Qualys is seeking an experienced Principal SME for Scanning Technologies based in Colorado, USA. You will lead initiatives to enhance vulnerability detection and improve scanning accuracy across enterprise environments.

The ideal candidate should have over 6 years of experience in vulnerability management and scanning technologies. A competitive salary of $140k - $175k per year is offered, along with a comprehensive benefits package for employees.

Qualifications

• 6+ years of experience in vulnerability management and scanning technologies.
• Solid understanding of OS-level security and cloud infrastructure.
• Excellent communication and stakeholder management skills.

Responsibilities

• Lead the design and optimization of scanning technologies across Qualys platforms.
• Collaborate with product and engineering teams to enhance scan coverage.
• Drive continuous improvement in scanning methodologies.

Skills

Vulnerability management

Scanning technologies

Enterprise security operations

API integrations

Communication skills

Tools

Qualys VMDR

Qualys Policy Compliance

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! Qualys Inc. is a pioneer and leading provider of cloud security and compliance solutions. Qualys helps organizations simplify security operations and lower the cost of compliance by delivering critical security intelligence on demand and automating the full spectrum of auditing, compliance and protection for IT systems and web applications via its award‑winning Qualys Cloud Platform.

Qualys is looking for an experienced Principal SME for Scanning Technologies to join the Product team in the USA. As an SME at Qualys, you will lead strategic initiatives to enhance vulnerability detection, scanning accuracy, and remediation workflows across enterprise environments using Qualys Cloud Agent, SDK / Command Line Agent, etc. You will be instrumental in shaping the future of Qualys scanning platforms, driving and improving scan performance and utilizing multiple scanners when and how to run a supplemental scan against a Cloud Agent asset. This role is ideal for a seasoned cybersecurity professional with deep expertise in vulnerability management, scanning technologies, and enterprise‑scale remediation strategies.

Key Responsibilities

• Lead the design and optimization of scanning technologies across Qualys platforms (Cloud Agent, Command Line Agent, VMDR, Policy Compliance, etc.) to define scanning strategies and best practices
• Architect scalable scanning solutions for hybrid environments (cloud, on‑prem, edge).
• Collaborate with product and engineering teams to enhance scan coverage, reduce false positives, and improve detection fidelity.
• Serve as the technical authority on Qualys scanning tools, APIs, and integrations.
• Drive continuous improvement in scanning methodologies, including agent‑based and agentless approaches.
• Represent Qualys in industry forums, customer engagements, and partner alliances focused on scanning and risk operations.
• Interface with product management to help prioritize the most impactful scanning strategies.
• Improve Vulnerability Coverage Efficacy.
• Develop and deliver a variety of technical engagements including workshops, whiteboarding architecture design sessions, and training.
• Lead delivery of a fully functional, integrated Proof of Concept leveraging the latest Qualys SDK, Command Line Agent, and other relevant interfaces and scanners for comprehensive scanning strategies.

Required Qualifications

• 6+ years of experience in vulnerability management, scanning technologies, and enterprise security operations.
• Expertise in Qualys platforms (VMDR, Policy Compliance) will be good but not mandatory.
• Solid understanding of OS‑level security, network protocols, and cloud infrastructure.
• Experience with API integrations, CMDB enrichment, and scan orchestration.
• Excellent communication and stakeholder management skills in a global, matrixed environment.

Preferred Experience

• Experience in large enterprise environments.
• Background in product design, Pre sales, and familiarity working with product builds.
• Familiarity with risk‑based vulnerability management frameworks.
• Experience in 24/7 high‑availability infrastructure and application hosting.
• Good understanding and hands‑on experience with Security products and technologies not limited to asset management, patching, vulnerability management, risk assessment, configuration management, and cloud security.
• Ability to understand and design complex architectures that improve scanning efficiency use cases end‑to‑end.
• Self‑starter who has a “can‑do” attitude and passion for leveraging technology to solve business problems.
• Strong communicator.
• Excellent interpersonal and presentation skills.

The salary range for this position is $140,000 - $175,000 per year. Final compensation will be determined based on several factors, including but not limited to skills, relevant experience, and work location. Please note this range reflects base salary and does not include incentive compensation or potential equity grants. We also offer a comprehensive and highly competitive benefits package.

Qualys is an Equal Opportunity Employer, please see our EEO policy.