Senior Director of Subject Matter Expert – CTEM, RBVM, ASPM – Risk Operation Center (ROC)

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Job Description: Senior Director of Subject Matter Expert – CTEM, RBVM, ASPM – Risk Operation Center (ROC)

Date posted: March 2026

About the job

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

Senior Director of Subject Matter Expert – CTEM, RBVM, CAASM – Risk Operation Center

Location: Foster City, CA, USA
Organization: Product GTM & SME
Reports To: SVP of Product Management

Role Overview

We are seeking a Senior Director – Subject Matter Expert (SME) to lead deep technical expertise and field architecture & deployment for the Qualys Enterprise TruRisk Management (ETM) platform and Risk Operations Center (ROC) operating model.

This role is a hands-on technical SME leadership position responsible for driving the architecture, deployment strategy, and customer adoption of Qualys exposure management solutions including:

• Enterprise TruRisk Management (ETM)
• Risk Operations Center (ROC)

• Cyber Risk Quantification (CRQ)
• VMDR (Vulnerability Management Detection & Response)
• CyberSecurity Asset Management (CSAM)
• External Attack Surface Management (EASM)

The Senior Director will serve as a technical authority and practitioner working directly with engineering, product management, and enterprise customers to operationalize Continuous Threat Exposure Management (CTEM) and modern risk-centric security operations - ROC

This role will lead a small elite team of 5–6 technical SMEs responsible for architecture guidance, field enablement, customer advisory, leading POC/POV and feedback into the product roadmap.

Key Responsibilities

Technical Leadership & Architecture

Act as the deep technical authority for Qualys exposure management architecture including:

• ETM risk correlation and prioritization
• ROC operational workflows
• Vulnerability management and remediation orchestration
• ASPM & CNAPP integration to Exposure Management Platform (ETM)
• Cross-domain exposure analytics across infrastructure, cloud, identity, and applications

Design and guide enterprise implementations that integrate:

• VMDR vulnerability telemetry
• Asset intelligence from CSAM
• External attack surface data from EASM
• Cloud posture insights from TotalCloud
• Application security insights from ASPM / TotalAppSec

• 3rd Party (Non-Qualys) Ecosystems such as CNAPP, AppSec, IoT/OT, Identity, CMDB, etc.

Lead the development of reference architectures and deployment models for large global enterprises.

Outbound Customer and Sales enablement Responsibilities:

• Develop sales enablement collateral, including customer product presentations, decks and demo scripts.
• Help develop messaging and product positioning in collaboration with PM and PMMs leads.
• Research the competitive landscape, determine how competitors are positioned and develop optimized positioning strategies and support documents for the CTEM, CAASM, CRQ, and RBVM.
• Educate the sales team on how to address competitors in the field with Qualys’ unique positioning.
• Develop collateral and be an expert on CTEM and RBVM technology and terminology.
• Be an expert in explaining the product to sales and be involved with demos and presentations to customers.
• Foster strong relationships with customers to gather feedback, understand pain points, and translate insights into product requirements.
• Design, deliver, and train the Qualys Sales Team on value-based demonstration of our products

Hands-On Platform Expertise

Work directly with engineering and product teams to:

• Prototype new ETM and ROC capabilities
• Validate exposure management workflows
• Test integrations with DevSecOps pipelines and CI/CD environments
• Provide technical feedback on product architecture and scalability

Provide deep expertise in:

• Vulnerability lifecycle management
• Exposure prioritization and TruRisk scoring
• Attack path analysis
• Cyber Risk quantification
• Remediation orchestration
• ASPM and application risk correlation.

Risk Operations Center (ROC) Strategy

Define how enterprises implement the Risk Operations Center model using Qualys ETM.

Develop best practices and implementation playbooks for:

• Cross-team risk prioritization
• Exposure triage workflows
• Remediation SLAs
• Executive risk reporting
• Operationalizing CTEM across security teams.

Cus