Senior Medical Director, Oncology

Corcept Therapeutics; Redwood City (CA); On-site; USD 200,000 - 235,000; Full time

Job summary

Qualys is seeking a Senior Director of Subject Matter Expert (SME) to lead architecture and deployment for CTEM and RBVM across global enterprises. You will work with engineering, product management, and customers to operationalize exposure management solutions including ETM, ROC, VMDR, CSAM and EASM.

This hands-on leadership role will mentor a team of 56 SMEs, develop reference architectures, and drive POC/POV programs, field enablement, and product roadmap feedback to accelerate adoption and

Qualifications

• Senior-level cybersecurity architecture or technical leadership.
• Experience with vulnerability management and exposure management platforms.
• Strong knowledge of CTEM, RBVM, AppSec and CNAPP ecosystems.

Responsibilities

• Provide technical leadership for ETM and ROC architecture and deployment.
• Lead enterprise-scale implementations and customer adoption initiatives.
• Develop sales enablement collateral and product positioning for CTEM/RBVM.

Skills

Cybersecurity architecture

Vulnerability management

CTEM RBVM AppSec CNAPP

Cloud platforms

DevSecOps

Education

Bachelor's degree in CS/Engineering

Tools

AWS

Azure

GCP

DevSecOps tooling

Job description

Senior Director of Subject Matter Expert CTEM, RBVM, ASPM Risk Operation Center (ROC)

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Location: Foster City, CA, USA Organization: Product GTM & SME Reports To: SVP of Product Management

Role Overview

We are seeking a Senior Director Subject Matter Expert (SME) to lead deep technical expertise and field architecture & deployment for the Qualys Enterprise TruRisk Management (ETM) platform and Risk Operations Center (ROC) operating model.

This role is a hands‑on technical SME leadership position responsible for driving the architecture, deployment strategy, and customer adoption of Qualys exposure management solutions including:

• Enterprise TruRisk Management (ETM)
• Risk Operations Center (ROC)
• VMDR (Vulnerability Management Detection & Response)
• CyberSecurity Asset Management (CSAM)
• External Attack Surface Management (EASM)

The Senior Director will serve as a technical authority and practitioner working directly with engineering, product management, and enterprise customers to operationalize Continuous Threat Exposure Management (CTEM) and modern risk‑centric security operations - ROC

This role will lead a small elite team of 56 technical SMEs responsible for architecture guidance, field enablement, customer advisory, leading POC/POV and feedback into the product roadmap.

Key Responsibilities

Technical Leadership & Architecture

Act as the deep technical authority for Qualys exposure management architecture including:

• ETM risk correlation and prioritization
• ROC operational workflows
• Vulnerability management and remediation orchestration
• ASPM & CNAPP integration to Exposure Management Platform (ETM)
• Cross‑domain exposure analytics across infrastructure, cloud, identity, and applications

Design and guide enterprise implementations that integrate:

• VMDR vulnerability telemetry
• Asset intelligence from CSAM
• External attack surface data from EASM
• Cloud posture insights from TotalCloud
• Application security insights from ASPM / TotalAppSec
• 3rd Party (Non‑Qualys) Ecosystems such as CNAPP, AppSec, IoT/OT, Identity, CMDB, etc.

Lead the development of reference architectures and deployment models for large global enterprises.

Outbound Customer and Sales enablement Responsibilities:

• Develop sales enablement collateral, including customer product presentations, decks and demo scripts.
• Help develop messaging and product positioning in collaboration with PM and PMMs leads.
• Research the competitive landscape, determine how competitors are positioned and develop optimized positioning strategies and support documents for the CTEM, CAASM, CRQ, and RBVM.
• Educate the sales team on how to address competitors in the field with Qualys' unique positioning.
• Develop collateral and be an expert on CTEM and RBVM technology and terminology.
• Be an expert in explaining the product to sales and be involved with demos and presentations to customers.
• Foster strong relationships with customers to gather feedback, understand pain points, and translate insights into product requirements.
• Design, deliver, and train the Qualys Sales Team on value‑based demonstration of our products

Hands‑On Platform Expertise

Work directly with engineering and product teams to:

• Prototype new ETM and ROC capabilities
• Test integrations with DevSecOps pipelines and CI/CD environments
• Provide technical feedback on product architecture and scalability
• Vulnerability lifecycle management
• Exposure prioritization and TruRisk scoring
• Attack path analysisCyber Risk quantification
• Remediation orchestration
• ASPM and application risk correlation.

Risk Operations Center (ROC) Strategy

Define how enterprises implement the Risk Operations Center model using Qualys ETM.

Develop best practices and implementation playbooks for:

• Cross‑team risk prioritization
• Remediation SLAs
• Operationalizing CTEM across security teams.

Customer Advisory & Strategic Engagement

Act as a trusted technical advisor to CISOs, security architects, and DevSecOps leaders.

Lead architecture workshops, executive technical briefings, strategic customer advisory sessions and proof‑of‑concept deployments.

Support major strategic and enterprise accounts globally and complex deployments

Support major strategic and enterprise accounts globally and complex deployments

Lead, mentor, and grow a team of 56 highly skilled technical SMEs, setting clear priorities, fostering a high‑performance culture, and ensuring a strong execution rhythm.

Build and deliver scalable and repeatable playbooks for:

• Field architecture guidance
• ETM and ROC technical enablement
• ASPM, CNAPP adoption and DevSecOps integration
• Product feedback and innovation.

Build a center of excellence for exposure management architecture within the company

Partner closely with Product Management and Engineering to:

• Influence product roadmap
• Validate new capabilities
• Translate customer needs into platform improvements
• Accelerate innovation across exposure management and application security.

Required Qualifications

• 1215+ years' experience in cybersecurity architecture, product strategy, or technical leadership
• Deep expertise in vulnerability management and exposure management platforms
• Strong hands‑on experience with application security, ASPM, and CNAPP ecosystems
• Experience designing security architectures for large enterprise environments
• Strong knowledge of cloud platforms (AWS, Azure, GCP)
• Familiarity with DevSecOps pipelines and developer security workflows
• Experience integrating security platforms across:
  • Exposure Management
  • Vulnerability management
  • Application security
  • Asset management
  • Identity security.
• Demonstrated ability to lead technical teams and influence cross‑functional stakeholders.

Preferred Experience

Experience working with platforms similar to Qualys and competitive vendor landscape focusing on RBVM, CTEM, AppSec, ASPM, CNAPP etc.

Familiarity with frameworks such as:

• NIST Cybersecurity Framework
• MITRE ATT&CK.

Experience working directly with enterprise CISOs and security leadership teams.

The salary range for this position is $200,000 - $235,000 per year. Final compensation will be determined based on several factors, including but not limited to skills, relevant experience, and work location. Please note this range reflects base salary and does not include incentive compensation or potential equity grants. We also offer a comprehensive and highly competitive benefits package.

Qualys is an Equal Opportunity Employer, please see our EEO policy.