Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
We are looking for a Subject Matter Expert (SME) – Compliance to join our team. This is a hands-on technical role focused on security configuration compliance, policy auditing, regulatory frameworks, configuration assessment, and compliance automation.
The SME will work closely with customers, sales, support, engineering, product, and product marketing teams to demonstrate solutions, solve complex compliance challenges, support evaluations and POCs, and help customers successfully adopt compliance capabilities.
The ideal candidate should combine deep technical expertise in security compliance with strong customer-facing and communication skills. The candidate should be comfortable understanding complex compliance requirements, translating them into practical technical solutions, conducting demonstrations and workshops, troubleshooting customer challenges, and influencing product direction based on real-world requirements.
Responsibilities:
- Demonstrate strong subject matter expertise in security configuration assessment, compliance auditing, policy management, and configuration hardening across enterprise environments.
- Act as the voice of customers, delivering value-focused demonstrations, workshops, and technical discussions while advising customers on compliance best practices.
- Act as a trusted advisor and evangelist for enterprise security compliance solutions, with a strong understanding of CIS Benchmarks, regulatory compliance, security frameworks, continuous compliance, and audit readiness.
- Provide expertise across compliance frameworks such as CIS, NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, FedRAMP, and other industry and regulatory standards.
- Work closely with support and engineering teams to troubleshoot complex compliance, policy, scanning, control, and deployment challenges and drive issues to resolution.
- Collaborate with Product Management and Engineering to translate customer requirements into product enhancements, features, and roadmap priorities.
- Assist the sales team with RFPs/RFIs, customer workshops, technical discovery, POCs, Beta engagements, and solution validation.
- Create targeted technical content, including pitch decks, solution briefs, use cases, demo videos, technical blogs, whitepapers, and compliance best-practice content.
- Deliver sales, partner, and internal technical training, keeping teams updated on the latest compliance capabilities, use cases, and competitive positioning.
- Analyze the competitive landscape, develop competitive intelligence, and train sales teams on positioning compliance solutions against competing security and configuration assessment platforms.
- Collaborate with Product Marketing to develop compelling product collateral, demonstrations, customer stories, and go-to-market content.
- Identify opportunities to improve customer adoption, compliance maturity, audit readiness, and expansion into broader compliance use cases.
Required Qualifications:
- 5+ years of experience in solution engineering, pre-sales systems engineering, technical consulting, product SME, compliance consulting, or a similar customer-facing technical role.
- Strong hands-on knowledge of security configuration management, compliance assessment, policy auditing, and configuration hardening.
- Experience working with CIS Benchmarks and security/compliance frameworks such as NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, or FedRAMP.
- Good understanding of vulnerability management, security configuration assessment, continuous compliance, and audit readiness.
- Hands-on experience with Windows, Linux/Unix, databases, and enterprise infrastructure technologies.
- Familiarity with REST APIs, automation, scripting, and integrations is an advantage.
- Experience with enterprise security and compliance platforms is preferred.
- Excellent analytical, written, presentation, and verbal communication skills, with the ability to explain complex compliance and technical requirements in simple business terms.
- Strong customer-facing skills with the ability to conduct technical workshops, product demonstrations, POCs, and executive-level discussions.
- Comfortable handling conflicts and capable of influencing cross-functional teams without formal authority.
- Ability to work effectively across customers, sales, support, engineering, product management, and marketing teams.
- Bachelor's/Master's degree in Computer Science, Computer Engineering, Information Security, or equivalent experience.
Qualys is an Equal Opportunity Employer, please see our EEO policy.
Skills Required
- 5+ years of experience in solution engineering, pre-sales systems engineering, technical consulting, product subject matter expertise, compliance consulting, or a similar customer-facing technical role
- Hands-on knowledge of security configuration management, compliance assessment, policy auditing, and configuration hardening
- Experience with CIS Benchmarks and security/compliance frameworks such as NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, or FedRAMP
- Understanding of vulnerability management, security configuration assessment, continuous compliance, and audit readiness
- Hands-on experience with Windows, Linux/Unix, databases, and enterprise infrastructure technologies
- Familiarity with REST APIs, automation, scripting, and integrations
- Experience with enterprise security and compliance platforms
- Excellent analytical, written, presentation, and verbal communication skills
- Strong customer-facing skills, including technical workshops, product demonstrations, proof-of-concepts, and executive-level discussions
- Ability to handle conflicts and influence cross-functional teams without formal authority
- Ability to work effectively across customers, sales, support, engineering, product management, and marketing teams
- Bachelor's or Master's degree in Computer Science, Computer Engineering, Information Security, or equivalent experience
Qualys Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about Qualys and has not been reviewed or approved by Qualys.
-
Affordable Benefits — Benefits costs are widely viewed as low for employees and dependents, with healthcare often described as almost fully paid for. Feedback suggests this affordability helps offset perceptions of lower base pay in some roles.
-
Healthcare Strength — Healthcare offerings are broad, including multiple medical plan options, dental and vision coverage, mental health support, and disability insurance. Benefits are described as “pretty amazing” or “great,” reinforcing perceived quality and coverage depth.
-
Equity Value & Accessibility — Equity participation is accessible through company stock plans and an employee stock purchase plan. Compensation packages commonly include equity alongside salary and bonus, which some consider a meaningful part of total rewards.
Qualys Insights
What We Do
Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings. The Qualys Cloud Platform leverages a single agent to continuously deliver critical security intelligence while enabling enterprises to automate the full spectrum of vulnerability detection, compliance, and protection for IT systems, workloads and web applications across on premises, endpoints, servers, public and private clouds, containers, and mobile devices. Founded in 1999 as one of the first SaaS security companies, Qualys has strategic partnerships and seamlessly integrates its vulnerability management capabilities into security offerings from cloud service providers, including Amazon Web Services, the Google Cloud Platform and Microsoft Azure, along with a number of leading managed service providers and global consulting organizations. For more information, please visit http://www.qualys.com







