Senior Subject Matter Expert, Compliance Solutions

Qualys; Raleigh, Northern (NC, KY); On-site; USD 120,000 - 190,000; Full time

Job summary

Qualys is seeking a Subject Matter Expert (SME) – Compliance to join our security team. This role emphasizes hands-on security configuration compliance, policy auditing, and regulatory frameworks across enterprise environments.

You will conduct demonstrations, workshops, and technical discussions, advising customers on best practices and assisting with POCs, RFPs, and solution validation while aligning product direction with real-world requirements.

Qualifications

• 5+ years in solution engineering, pre-sales, technical consulting, or similar customer-facing role.
• Strong hands-on security configuration management, compliance assessment, policy auditing, and configuration hardening.
• Experience with CIS Benchmarks and security frameworks (NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, FedRAMP).
• Understanding of vulnerability management, continuous compliance, and audit readiness.
• Hands-on experience with Windows, Linux/Unix, databases, and enterprise infrastructure.
• Familiarity with REST APIs, automation, scripting, and integrations is a plus.
• Experience with enterprise security and compliance platforms is preferred.
• Excellent communication and customer-facing skills for workshops and presentations.

Responsibilities

• Demonstrate expertise in security configuration assessment, compliance auditing, policy management, and hardening.
• Deliver value-focused demos, workshops, and technical discussions with customers.
• Advise on compliance best practices and audit readiness.
• Provide guidance on CIS, NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, FedRAMP etc.
• Troubleshoot complex compliance, policy, scanning, and deployment challenges.
• Collaborate with Product Management to translate customer requirements into product enhancements.
• Assist sales with RFPs, workshops, POCs, and solution validation.
• Create technical content such as decks, briefs, use cases, videos, whitepapers.

Skills

Security configuration management

Compliance assessment

Policy auditing

Configuration hardening

REST APIs

Automation scripting

Customer-facing communication

Workshop facilitation and demos

Education

Bachelor's/Master's in CS/CE/InfoSec or equivalent

Tools

REST APIs

Automation tooling

Databases

Enterprise infrastructure technologies

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world! We are looking for a Subject Matter Expert (SME) – Compliance to join our team. This is a hands‑on technical role focused on security configuration compliance, policy auditing, regulatory frameworks, configuration assessment, and compliance automation. The SME will work closely with customers, sales, support, engineering, product, and product marketing teams to demonstrate solutions, solve complex compliance challenges, support evaluations and POCs, and help customers successfully adopt compliance capabilities. The ideal candidate should combine deep technical expertise in security compliance with strong customer‑facing and communication skills. The candidate should be comfortable understanding complex compliance requirements, translating them into practical technical solutions, conducting demonstrations and workshops, troubleshooting customer challenges, and influencing product direction based on real‑world requirements.

Responsibilities

• Demonstrate strong subject matter expertise in security configuration assessment, compliance auditing, policy management, and configuration hardening across enterprise environments.
• Act as the voice of customers, delivering value‑focused demonstrations, workshops, and technical discussions while advising customers on compliance best practices.
• Act as a trusted advisor and evangelist for enterprise security compliance solutions, with a strong understanding of CIS Benchmarks, regulatory compliance, security frameworks, continuous compliance, and audit readiness.
• Provide expertise across compliance frameworks such as CIS, NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, FedRAMP, and other industry and regulatory standards.
• Work closely with support and engineering teams to troubleshoot complex compliance, policy, scanning, control, and deployment challenges and drive issues to resolution.
• Collaborate with Product Management and Engineering to translate customer requirements into product enhancements, features, and roadmap priorities.
• Assist the sales team with RFPs/RFIs, customer workshops, technical discovery, POCs, Beta engagements, and solution validation.
• Create targeted technical content, including pitch decks, solution briefs, use cases, demo videos, technical blogs, whitepapers, and compliance best‑practice content.
• Deliver sales, partner, and internal technical training, keeping teams updated on the latest compliance capabilities, use cases, and competitive positioning.
• Analyze the competitive landscape, develop competitive intelligence, and train sales teams on positioning compliance solutions against competing security and configuration assessment platforms.
• Collaborate with Product Marketing to develop compelling product collateral, demonstrations, customer stories, and go‑to‑market content.
• Identify opportunities to improve customer adoption, compliance maturity, audit readiness, and expansion into broader compliance use cases.

Required Qualifications

• 5+ years of experience in solution engineering, pre‑sales systems engineering, technical consulting, product SME, compliance consulting, or a similar customer‑facing technical role.
• Strong hands‑on knowledge of security configuration management, compliance assessment, policy auditing, and configuration hardening.
• Experience working with CIS Benchmarks and security/compliance frameworks such as NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, or FedRAMP.
• Good understanding of vulnerability management, security configuration assessment, continuous compliance, and audit readiness.
• Hands‑on experience with Windows, Linux/Unix, databases, and enterprise infrastructure technologies.
• Familiarity with REST APIs, automation, scripting, and integrations is an advantage.
• Experience with enterprise security and compliance platforms is preferred.
• Excellent analytical, written, presentation, and verbal communication skills, with the ability to explain complex compliance and technical requirements in simple business terms.
• Strong customer‑facing skills with the ability to conduct technical workshops, product demonstrations, POCs, and executive‑level discussions.
• Comfortable handling conflicts and capable of influencing cross‑functional teams without formal authority.
• Ability to work effectively across customers, sales, support, engineering, product management, and marketing teams.
• Bachelor's/Master's degree in Computer Science, Computer Engineering, Information Security, or equivalent experience.

Qualys is an Equal Opportunity Employer, please see our EEO policy.

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud‑based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.