Leads the global Product Security organization and security strategy for large-scale SaaS and cloud platforms. Oversees secure engineering, application and cloud security, DevSecOps, vulnerability management, threat modeling, supply chain security, compliance, and multi-cloud architecture. Owns security budgets, roadmaps, executive communications, FedRAMP and DoD authorizations, CMMC alignment, NIAP Common Criteria certifications, and government security programs across AWS, Azure, GCP, and OCI.
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Vice President, Product Security
Overview
Executive leader responsible for defining and executing enterprise Product Security strategy across cloud-native SaaS platforms, secure software development, regulatory compliance, and multi-cloud environments. Leads global security engineering, architecture, and compliance teams while partnering with Product, Engineering, Cloud Operations, Legal, and executive leadership.
Required Qualifications
Executive Leadership
- 12+ years of cybersecurity, product security, application security, cloud security, or security architecture experience, including 7+ years in senior leadership roles.
- Proven success building and scaling global Product Security organizations.
- Experience leading directors, managers, architects, and security engineering teams.
- Strong executive communication skills with Boards, C-suite leaders, customers, auditors, and regulators.
- Experience managing security strategy, budgets, forecasting, vendors, and enterprise security programs.
- Ability to influence product and engineering roadmaps across cross-functional organizations.
Product Security & Secure Engineering
- Deep expertise in Product Security, Application Security, Cloud Security, DevSecOps, SSDLC, and software supply chain security.
- Experience implementing:
- Security-by-Design
- Threat Modeling
- Secure Coding Standards
- Vulnerability Management
- Red Team Programs
- Bug Bounty Programs
- SBOM and Supply Chain Security
- Secure CI/CD Pipelines
- Container and Kubernetes Security
- Strong knowledge of Zero Trust, OAuth2, OpenID Connect, SAML, PKI, Secrets Management, and PAM.
- Expertise with NIST, OWASP, CIS Controls, SOC 2, and ISO 27001 frameworks.
Federal & Regulated Environment Security
- 10+ years supporting U.S. Federal cybersecurity and compliance programs.
- Proven experience achieving and maintaining FedRAMP Moderate and High authorizations.
- Strong knowledge of NIST SP 800-53, FedRAMP Continuous Monitoring, POA&M management, and government assessment processes.
- Experience supporting CMMC 2.0, NIST 800-171, DFARS requirements, and DoD cloud environments (IL4/IL5/IL6).
- Familiarity with DISA STIGs, CC SRG, CUI, and regulated government workloads.
- Experience supporting NIAP/Common Criteria certification initiatives preferred.
Multi-Cloud Security
- 15+ years securing enterprise-scale cloud platforms.
- Hands-on expertise across AWS, Azure, GCP, and OCI.
- Experience with cloud identity, security monitoring, key management, container security, governance, and compliance frameworks.
- Track record implementing consistent security controls across multi-cloud and hybrid-cloud environments.
Preferred Qualifications
- CISSP, CCSP, GIAC, SABSA, or equivalent certifications.
- Prior experience as VP Product Security, Head of Product Security, Chief Product Security Officer, or comparable senior security executive.
- Experience in publicly traded technology companies and Board-level cybersecurity reporting.
- M&A security due diligence and post-acquisition integration experience.
- Background supporting cybersecurity, cloud security, vulnerability management, endpoint security, or SIEM platforms.
Qualys is an Equal Opportunity Employer, please see our EEO policy.
Similar Jobs
Security • Software • Cybersecurity
Leads the strategy, lifecycle, financial performance, positioning, and growth of Arctic Wolf’s Endpoint Security portfolio. The role oversees product expansion, cross-sell opportunities, competitive analysis, M&A integration, and integration with managed security services. It also leads a global product management team, establishes product metrics and operating cadences, and represents endpoint strategy to executives, customers, analysts, and partners.
Top Skills:
Behavioral DetectionEdr TelemetryEndpoint AgentsEndpoint Detection And Response (Edr)Operating-System Architecture
Machine Learning • Payments • Security • Software • Financial Services
Leads the design and development of software solutions, resolves complex technical problems, and provides guidance to engineering colleagues. Responsibilities include preparing technical documentation, reviewing code and testing, applying modern development methodologies, and supporting business initiatives. The role typically requires a bachelor’s degree and at least three years of relevant experience. Preferred skills include Agile, cloud computing, DevOps, requirements analysis, system design, and project management.
Top Skills:
Agile MethodologyCloud ComputingDevOps
Machine Learning • Payments • Security • Software • Financial Services
Manages the lifecycle of less complex merchant services products and initiatives, including product selection, design, development, pricing, promotion, rollout, and performance analysis. Builds business cases, evaluates market and technology trends, collaborates with sales, marketing, digital, and external partners, and supports risk, compliance, and audit activities. Uses customer insights and business results to recommend product improvements.
What you need to know about the Charlotte Tech Scene
Ranked among the hottest tech cities in 2024 by CompTIA, Charlotte is quickly cementing its place as a major U.S. tech hub. Home to more than 90,000 tech workers, the city’s ecosystem is primed for continued growth, fueled by billions in annual funding from heavyweights like Microsoft and RevTech Labs, which has created thousands of fintech jobs and made the city a go-to for tech pros looking for their next big opportunity.
Key Facts About Charlotte Tech
- Number of Tech Workers: 90,859; 6.5% of overall workforce (2024 CompTIA survey)
- Major Tech Employers: Lowe’s, Bank of America, TIAA, Microsoft, Honeywell
- Key Industries: Fintech, artificial intelligence, cybersecurity, cloud computing, e-commerce
- Funding Landscape: $3.1 billion in venture capital funding in 2024 (CED)
- Notable Investors: Microsoft, Google, Falfurrias Management Partners, RevTech Labs Foundation
- Research Centers and Universities: University of North Carolina at Charlotte, Northeastern University, North Carolina Research Campus
