Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
As a Lead Cyber Risk Advisor, you will be a vital member of the Qualys Cyber Risk Experts Service, supporting enterprise customers with risk analysis, vulnerability assessment, and remediation guidance. Working within the Qualys Risk Operations Center (ROC), you will monitor, research, and contextualize threat and vulnerability data to help customers make informed decisions and reduce their cyber risk exposure.
You’ll collaborate with Senior Cyber Risk Advisors, Solution Architects, and Product teams to deliver timely and relevant insights that empower customers to prioritize and remediate the most critical risks across complex IT and cloud environments.
Responsibilities
- Perform continuous monitoring and analysis of customer vulnerability and asset risk data using the Qualys TruRisk Platform.
- Research threat intelligence, vulnerability disclosures, and exploit activity to determine risk relevance and customer impact.
- Generate reports, dashboards, and executive briefings to communicate key cyber risk trends and priorities.
- Track customer remediation progress and provide recommendations to accelerate risk reduction.
- Participate in operational cadence calls, vulnerability posture reviews, and ad-hoc investigations.
- Identify emerging issues across accounts and escalate high-risk findings to Senior Cyber Risk Advisors and threat research teams.
- Contribute to knowledge bases, playbooks, and service process improvements.
- Support onboarding of new customer environments into the service workflow.
Qualifications
Required:
- 8–10 years of experience in cybersecurity, IT risk, or threat analysis roles.
- Foundational knowledge of vulnerability management, CVEs, CVSS, and exploitability metrics.
- Strong data analysis and critical thinking skills; ability to work with complex datasets.
- Familiarity with common cybersecurity frameworks (e.g., NIST, CIS Controls).
- Excellent written and verbal communication skills, including comfort presenting to stakeholders.
- Experience with one or more vulnerability management, CNAPP, appsec, or cyber threat exposure management platforms.
Preferred:
- Experience working in a SOC, MSSP, or cyber advisory function.
- Familiarity with scripting or data querying languages (e.g., Python, SQL) a plus.
- Interest in learning cloud security (AWS, Azure, GCP).
- Relevant certifications (e.g., CEH, GSNA, Security+, GSEC, GCIA, GMON, Qualys VMDR Specialist) a plus.
#LI-Remote
***********************************************************************************************************
The salary range for this position is $155,000 - $175,000 per year. Final compensation will be determined based on several factors, including but not limited to skills, relevant experience, and work location. Please note this range reflects base salary and does not include incentive compensation or potential equity grants. We also offer a comprehensive and highly competitive benefits package.
Qualys is an Equal Opportunity Employer, please see our EEO policy.
Skills Required
- 8-10 years of experience in cybersecurity, IT risk, or threat analysis roles
- Foundational knowledge of vulnerability management, CVEs, CVSS, and exploitability metrics
- Strong data analysis and critical thinking skills; ability to work with complex datasets
- Familiarity with common cybersecurity frameworks (e.g., NIST, CIS Controls)
- Excellent written and verbal communication skills, including comfort presenting to stakeholders
- Experience with one or more vulnerability management, CNAPP, appsec, or cyber threat exposure management platforms
- Experience working in a SOC, MSSP, or cyber advisory function
- Familiarity with scripting or data querying languages (e.g., Python, SQL)
- Interest in learning cloud security (AWS, Azure, GCP)
- Relevant certifications (e.g., CEH, GSNA, Security+, GSEC, GCIA, GMON, Qualys VMDR Specialist)
Qualys Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Qualys and has not been reviewed or approved by Qualys.
-
Affordable Benefits — Benefits costs are widely viewed as low for employees and dependents, with healthcare often described as almost fully paid for. Feedback suggests this affordability helps offset perceptions of lower base pay in some roles.
-
Healthcare Strength — Healthcare offerings are broad, including multiple medical plan options, dental and vision coverage, mental health support, and disability insurance. Benefits are described as “pretty amazing” or “great,” reinforcing perceived quality and coverage depth.
-
Equity Value & Accessibility — Equity participation is accessible through company stock plans and an employee stock purchase plan. Compensation packages commonly include equity alongside salary and bonus, which some consider a meaningful part of total rewards.
Qualys Insights
What We Do
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com
