Senior Subject Matter Expert, Compliance Solutions

QLYS_US Qualys, Inc.; Nevada (IA); On-site; USD 130,000 - 180,000; Full time

Job summary

Qualys, Inc. is seeking a Subject Matter Expert (SME) - Compliance to join our team. This hands-on role focuses on security configuration compliance, policy auditing, regulatory frameworks, configuration assessment, and compliance automation.

The SME will work with customers, sales, support, engineering, product, and product marketing to demonstrate solutions, support evaluations and POCs, and help customers adopt compliance capabilities with strong communication skills and industry knowledge.

Qualifications

• 5+ years in solution engineering, pre-sales systems engineering, technical consulting, product SME, compliance consulting, or a similar customer-facing technical role.
• Deep hands-on knowledge of security configuration management, compliance assessment, policy auditing, and configuration hardening.
• Experience with CIS Benchmarks and security frameworks such as NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, or FedRAMP.

Responsibilities

• Demonstrate strong subject matter expertise in security configuration assessment, compliance auditing, policy management, and configuration hardening across enterprise environments.
• Provide demonstrations, workshops, and technical discussions while advising customers on compliance best practices.
• Collaborate with Product Management and Engineering to translate customer requirements into product enhancements and roadmap priorities.

Skills

Security configuration management

Compliance assessment

Policy auditing

Configuration hardening

Windows

Linux/Unix

REST APIs

Automation scripting

Customer-facing skills

Education

Bachelor's or Master’s in Computer Science/Engineering or Information Security

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! We are looking for a Subject Matter Expert (SME) - Compliance to join our team. This is a hands-on technical role focused on security configuration compliance, policy auditing, regulatory frameworks, configuration assessment, and compliance automation. The SME will work closely with customers, sales, support, engineering, product, and product marketing teams to demonstrate solutions, solve complex compliance challenges, support evaluations and POCs, and help customers successfully adopt compliance capabilities. The ideal candidate should combine deep technical expertise in security compliance with strong customer-facing and communication skills. The candidate should be comfortable understanding complex compliance requirements, translating them into practical technical solutions, conducting demonstrations and workshops, troubleshooting customer challenges, and influencing product direction based on real-world requirements.

Responsibilities:

Demonstrate strong subject matter expertise in security configuration assessment, compliance auditing, policy management, and configuration hardening across enterprise environments. Act as the voice of customers, delivering value-focused demonstrations, workshops, and technical discussions while advising customers on compliance best practices. Act as a trusted advisor and evangelist for enterprise security compliance solutions, with a strong understanding of CIS Benchmarks, regulatory compliance, security frameworks, continuous compliance, and audit readiness. Provide expertise across compliance frameworks such as CIS, NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, FedRAMP, and other industry and regulatory standards. Work closely with support and engineering teams to troubleshoot complex compliance, policy, scanning, control, and deployment challenges and drive issues to resolution. Collaborate with Product Management and Engineering to translate customer requirements into product enhancements, features, and roadmap priorities. Assist the sales team with RFPs/RFIs, customer workshops, technical discovery, POCs, Beta engagements, and solution validation. Create targeted technical content, including pitch decks, solution briefs, use cases, demo videos, technical blogs, whitepapers, and compliance best-practice content. Deliver sales, partner, and internal technical training, keeping teams updated on the latest compliance capabilities, use cases, and competitive positioning. Analyze the competitive landscape, develop competitive intelligence, and train sales teams on positioning compliance solutions against competing security and configuration assessment platforms. Collaborate with Product Marketing to develop compelling product collateral, demonstrations, customer stories, and go-to-market content. Identify opportunities to improve customer adoption, compliance maturity, audit readiness, and expansion into broader compliance use cases.

Required Qualifications:

5+ years of experience in solution engineering, pre-sales systems engineering, technical consulting, product SME, compliance consulting, or a similar customer-facing technical role. Strong hands-on knowledge of security configuration management, compliance assessment, policy auditing, and configuration hardening. Experience working with CIS Benchmarks and security/compliance frameworks such as NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, or FedRAMP. Good understanding of vulnerability management, security configuration assessment, continuous compliance, and audit readiness. Hands-on experience with Windows, Linux/Unix, databases, and enterprise infrastructure technologies. Familiarity with REST APIs, automation, scripting, and integrations is an advantage. Experience with enterprise security and compliance platforms is preferred. Excellent analytical, written, presentation, and verbal communication skills, with the ability to explain complex compliance and technical requirements in simple business terms. Strong customer-facing skills with the ability to conduct technical workshops, product demonstrations, POCs, and executive-level discussions. Comfortable handling conflicts and capable of influencing cross-functional teams without formal authority. Ability to work effectively across customers, sales, support, engineering, product management, and marketing teams. Bachelor's/Master's degree in Computer Science, Computer Engineering, Information Security, or equivalent experience.

Qualys is an Equal Opportunity Employer, please see our EEO policy.

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.