Vice President, Product Security

Qualys • North Carolina, DE

5d

About The Position

The Vice President, Product Security is an executive leader responsible for defining and executing enterprise Product Security strategy across cloud-native SaaS platforms, secure software development, regulatory compliance, and multi-cloud environments. The role leads global security engineering, architecture, and compliance teams and partners with Product, Engineering, Cloud Operations, Legal, and executive leadership.

Requirements

• 12+ years of cybersecurity, product security, application security, cloud security, or security architecture experience, including 7+ years in senior leadership roles.
• Proven success building and scaling global Product Security organizations.
• Experience leading directors, managers, architects, and security engineering teams.
• Strong executive communication skills with Boards, C-suite leaders, customers, auditors, and regulators.
• Experience managing security strategy, budgets, forecasting, vendors, and enterprise security programs.
• Ability to influence product and engineering roadmaps across cross-functional organizations.
• Deep expertise in Product Security, Application Security, Cloud Security, DevSecOps, SSDLC, and software supply chain security.
• Strong knowledge of Zero Trust, OAuth2, OpenID Connect, SAML, PKI, Secrets Management, and PAM.
• Expertise with NIST, OWASP, CIS Controls, SOC 2, and ISO 27001 frameworks.
• 10+ years supporting U.S. Federal cybersecurity and compliance programs.
• Proven experience achieving and maintaining FedRAMP Moderate and High authorizations.
• Strong knowledge of NIST SP 800-53, FedRAMP Continuous Monitoring, POA&M management, and government assessment processes.
• Experience supporting CMMC 2.0, NIST 800-171, DFARS requirements, and DoD cloud environments (IL4/IL5/IL6).
• Familiarity with DISA STIGs, CC SRG, CUI, and regulated government workloads.
• 15+ years securing enterprise-scale cloud platforms.
• Hands-on expertise across AWS, Azure, GCP, and OCI.
• Experience with cloud identity, security monitoring, key management, container security, governance, and compliance frameworks.
• Track record implementing consistent security controls across multi-cloud and hybrid-cloud environments.

Nice To Haves

• Experience supporting NIAP/Common Criteria certification initiatives.
• CISSP, CCSP, GIAC, SABSA, or equivalent certifications.
• Prior experience as VP Product Security, Head of Product Security, Chief Product Security Officer, or comparable senior security executive.
• Experience in publicly traded technology companies and Board-level cybersecurity reporting.
• M&A security due diligence and post-acquisition integration experience.
• Background supporting cybersecurity, cloud security, vulnerability management, endpoint security, or SIEM platforms.

Responsibilities

• Define and execute enterprise Product Security strategy across cloud-native SaaS platforms, secure software development, regulatory compliance, and multi-cloud environments.
• Lead global security engineering, architecture, and compliance teams.
• Partner with Product, Engineering, Cloud Operations, Legal, and executive leadership.
• Manage security strategy, budgets, forecasting, vendors, and enterprise security programs.
• Influence product and engineering roadmaps across cross-functional organizations.
• Build and scale global Product Security organizations.
• Implement security-by-design, threat modeling, secure coding standards, vulnerability management, red team and bug bounty programs, SBOM and supply chain security, secure CI/CD pipelines, and container and Kubernetes security.
• Support U.S. Federal cybersecurity and compliance programs, including FedRAMP authorizations and continuous monitoring, POA&M management, and government assessments.
• Implement consistent security controls across multi-cloud and hybrid-cloud environments.

What This Job Offers

• Job Type: Full-time
• Career Level: Executive
• Education Level: No Education Listed