Vice President, Product Security

Qualys

. Define and execute enterprise Product Security strategy across cloud-native SaaS platforms, secure software development, regulatory compliance, and multi-cloud environments .

Posted 10/15/2026full-timeUnited StatesLeadWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates extensive expertise in Product Security, Application Security, and Cloud Security, with a strong focus on regulatory compliance and security strategy implementation across multi-cloud environments. Proven ability to lead and scale global security teams while influencing product and engineering roadmaps.

Highest-signal resume keywords

Product Security StrategyCloud Security ExpertiseSecurity-by-Design ImplementationNIST Compliance KnowledgeExecutive Communication Skills

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

CybersecurityApplication SecurityCloud SecurityDevSecOpsVulnerability ManagementThreat ModelingSecure CI/CD PipelinesContainer SecurityZero TrustSecure Coding Standards

Soft Skills

LeadershipCommunicationInfluencingCollaborationStrategic Thinking

Tools & Technologies

AWSAzureGCPOCISIEM PlatformsSecrets ManagementGovernance FrameworksSecurity MonitoringKey ManagementBug Bounty Programs

Certifications & Qualifications

CISSPCCSPGIACSABSA

Industry Keywords

FedRAMPCMMC 2.0NIST 800-171DFARSSOC 2ISO 27001NIAPCommon CriteriaDISA STIGsCUI

Tech Stack

Tools & technologies

AWSAzureCloudCyber SecurityGoogle Cloud PlatformKubernetes

About the role

Key responsibilities & impact

Define and execute enterprise Product Security strategy across cloud-native SaaS platforms, secure software development, regulatory compliance, and multi-cloud environments
Lead global security engineering, architecture, and compliance teams
Partner with Product, Engineering, Cloud Operations, Legal, and executive leadership
Build and scale global Product Security organizations
Lead directors, managers, architects, and security engineering teams
Manage security strategy, budgets, forecasting, vendors, and enterprise security programs
Influence product and engineering roadmaps across cross-functional organizations
Implement product and application security practices including Security-by-Design, threat modeling, secure coding standards, vulnerability management, red team and bug bounty programs, SBOM and supply chain security, secure CI/CD pipelines, and container and Kubernetes security
Support U.S. Federal cybersecurity and compliance programs, including FedRAMP, CMMC 2.0, NIST 800-171, DFARS, and DoD cloud environments
Secure enterprise-scale multi-cloud platforms across AWS, Azure, GCP, and OCI
Implement consistent security controls across multi-cloud and hybrid-cloud environments
Support NIAP/Common Criteria certification initiatives, M&A security due diligence, and post-acquisition integration

Requirements

What you’ll need

12+ years of cybersecurity, product security, application security, cloud security, or security architecture experience, including 7+ years in senior leadership roles
Proven success building and scaling global Product Security organizations
Experience leading directors, managers, architects, and security engineering teams
Strong executive communication skills with Boards, C-suite leaders, customers, auditors, and regulators
Experience managing security strategy, budgets, forecasting, vendors, and enterprise security programs
Ability to influence product and engineering roadmaps across cross-functional organizations
Deep expertise in Product Security, Application Security, Cloud Security, DevSecOps, SSDLC, and software supply chain security
Experience implementing Security-by-Design, Threat Modeling, Secure Coding Standards, Vulnerability Management, Red Team Programs, Bug Bounty Programs, SBOM and Supply Chain Security, Secure CI/CD Pipelines, and Container and Kubernetes Security
Strong knowledge of Zero Trust, OAuth2, OpenID Connect, SAML, PKI, Secrets Management, and PAM
Expertise with NIST, OWASP, CIS Controls, SOC 2, and ISO 27001 frameworks
10+ years supporting U.S. Federal cybersecurity and compliance programs
Proven experience achieving and maintaining FedRAMP Moderate and High authorizations
Strong knowledge of NIST SP 800-53, FedRAMP Continuous Monitoring, POA&M management, and government assessment processes
Experience supporting CMMC 2.0, NIST 800-171, DFARS requirements, and DoD cloud environments (IL4/IL5/IL6)
Familiarity with DISA STIGs, CC SRG, CUI, and regulated government workloads
Experience supporting NIAP/Common Criteria certification initiatives preferred
15+ years securing enterprise-scale cloud platforms
Hands-on expertise across AWS, Azure, GCP, and OCI
Experience with cloud identity, security monitoring, key management, container security, governance, and compliance frameworks
Track record implementing consistent security controls across multi-cloud and hybrid-cloud environments
CISSP, CCSP, GIAC, SABSA, or equivalent certifications preferred
Prior experience as VP Product Security, Head of Product Security, Chief Product Security Officer, or comparable senior security executive preferred
Experience in publicly traded technology companies and Board-level cybersecurity reporting preferred
M&A security due diligence and post-acquisition integration experience preferred
Background supporting cybersecurity, cloud security, vulnerability management, endpoint security, or SIEM platforms preferred