Vice President, Product Security

Qualys; Philadelphia (Philadelphia County); On-site; USD 250,000 - 420,000; Full time

Job summary

Qualys seeks a VP, Product Security to define and execute the enterprise product security strategy across cloud-native SaaS platforms and secure software development. You will lead global security engineering, architecture, and compliance teams while partnering with product, engineering, cloud operations, legal, and executive leadership to align security with business goals.

The role requires extensive executive leadership experience, deep expertise in product and cloud security, and a proven

Qualifications

• 12+ years in cybersecurity/product security domains, including 7+ years in senior leadership.
• Proven success building and scaling global Product Security organizations.
• Experience leading directors, managers, architects, and security engineering teams.
• Strong executive communication with Boards, C-suite, customers, auditors, and regulators.
• Experience managing security strategy, budgets, forecasting, vendors, and enterprise security programs.
• Ability to influence product and engineering roadmaps across cross-functional organizations.

Responsibilities

• Define and execute enterprise Product Security strategy across cloud-native SaaS platforms, secure software development, regulatory compliance, and multi-cloud environments.
• Lead global security engineering, architecture, and compliance teams.
• Partner with Product, Engineering, Cloud Operations, Legal, and executive leadership to align security with business goals.
• Oversee security programs including threat modeling, vulnerability management, and SBOM/supply chain security.

Skills

Executive Leadership

Product Security

Secure Engineering

Cloud Security

DevSecOps

Threat Modeling

Secure Coding

Vulnerability Mgmt

Zero Trust

NIST/ISO Controls

Tools

Kubernetes

CI/CD Security

Threat Modeling Tools

Job description

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Vice President, Product Security

Overview

Executive leader responsible for defining and executing enterprise Product Security strategy across cloud-native SaaS platforms, secure software development, regulatory compliance, and multi-cloud environments. Leads global security engineering, architecture, and compliance teams while partnering with Product, Engineering, Cloud Operations, Legal, and executive leadership.

Required Qualifications

Executive Leadership

• 12+ years of cybersecurity, product security, application security, cloud security, or security architecture experience, including 7+ years in senior leadership roles.
• Proven success building and scaling global Product Security organizations.
• Experience leading directors, managers, architects, and security engineering teams.
• Strong executive communication skills with Boards, C-suite leaders, customers, auditors, and regulators.
• Experience managing security strategy, budgets, forecasting, vendors, and enterprise security programs.
• Ability to influence product and engineering roadmaps across cross-functional organizations.

Product Security & Secure Engineering

• Deep expertise in Product Security, Application Security, Cloud Security, DevSecOps, SSDLC, and software supply chain security.
• Experience implementing:
  • Security-by-Design
  • Threat Modeling
  • Secure Coding Standards
  • Vulnerability Management
  • Red Team Programs
  • Bug Bounty Programs
  • SBOM and Supply Chain Security
  • Secure CI/CD Pipelines
  • Container and Kubernetes Security
• Strong knowledge of Zero Trust, OAuth2, OpenID Connect, SAML, PKI, Secrets Management, and PAM.
• Expertise with NIST, OWASP, CIS Controls, SOC 2, and ISO 27001 frameworks.

Federal & Regulated Environment Security

• 10+ years supporting U.S. Federal cybersecurity and compliance programs.
• Proven experience achieving and maintaining FedRAMP Moderate and High authorizations.
• Strong knowledge of NIST SP 800-53, FedRAMP Continuous Monitoring, POA&M management, and government assessment processes.
• Experience supporting CMMC 2.0, NIST 800-171, DFARS requirements, and DoD cloud environments (IL4/IL5/IL6).
• Familiarity with DISA STIGs, CC SRG, CUI, and regulated government workloads.
• Experience supporting NIAP/Common Criteria certification initiatives preferred.

Multi-Cloud Security

• 15+ years securing enterprise-scale cloud platforms.
• Hands-on expertise across AWS, Azure, GCP, and OCI.
• Experience with cloud identity, security monitoring, key management, container security, governance, and compliance frameworks.
• Track record implementing consistent security controls across multi-cloud and hybrid-cloud environments.

Preferred Qualifications

• CISSP, CCSP, GIAC, SABSA, or equivalent certifications.
• Prior experience as VP Product Security, Head of Product Security, Chief Product Security Officer, or comparable senior security executive.
• Experience in publicly traded technology companies and Board-level cybersecurity reporting.
• M&A security due diligence and post-acquisition integration experience.Background supporting cybersecurity, cloud security, vulnerability management, endpoint security, or SIEM platforms.

Qualys is an Equal Opportunity Employer, please see our EEO policy.