Senior Director, Federal Product Security & DoD Readiness

Qualys; Philadelphia (Philadelphia County); On-site; USD 200,000 - 300,000; Full time

Job summary

Qualys is seeking a Senior Director to own federal product security management, overseeing FedRAMP Moderate/High programs and future DoD authorizations. You will lead a small team including the Senior Federal Security Analyst and ISSO, with close collaboration across Engineering, DevOps, and R&D to ensure compliance before government deployments.

The ideal candidate will bring 7+ years in information security with FedRAMP/DoD experience, deep knowledge of NIST SP 800-53, and a proven ability

Qualifications

• 7+ years in information security or cloud compliance with FedRAMP/DoD leadership.
• Deep knowledge of NIST SP 800-53, FedRAMP High baselines, DoD Cloud SRG and FISMA.
• Experience directing DoD/FedRAMP authorizations for SaaS/PaaS.
• Strong executive presence and cross-functional leadership.
• US citizenship and residence in the United States.

Responsibilities

• Direct strategic roadmap and maintenance for FedRAMP Moderate/High.
• Lead DoD authorization readiness for IL4/IL5.
• Manage Senior Federal Security Analyst & ISSO and monitor ConMon/POA&M.
• Serve as executive liaison for 3PAO audits and JAB reviews.
• Collaborate with DevOps, SRE, Platform Eng, and R&D on compliance pre-deploy.
• Provide risk dashboards to VP Product Security, CISO, and executives.
• Enforce change control, FIPS-validated cryptography, and boundary isolation.

Skills

FedRAMP

DoD authorization

Executive leadership

Cloud security

NIST SP 800-53

Compliance audits

Continuous monitoring

3PAO liaison

Security architecture

Kubernetes

Job description

Qualys is seeking a Senior Director to own federal product security management, overseeing FedRAMP Moderate/High programs and future DoD authorizations. You will lead a small team including the Senior Federal Security Analyst and ISSO, with close collaboration across Engineering, DevOps, and R&D to ensure compliance before government deployments.

The ideal candidate will bring 7+ years in information security with FedRAMP/DoD experience, deep knowledge of NIST SP 800-53, and a proven ability