Senior Subject Matter Expert, Compliance Solutions

Responsibilities:

• Demonstrate strong subject matter expertise in security configuration assessment, compliance auditing, policy management, and configuration hardening across enterprise environments.
• Act as the voice of customers, delivering value-focused demonstrations, workshops, and technical discussions while advising customers on compliance best practices.
• Act as a trusted advisor and evangelist for enterprise security compliance solutions, with a strong understanding of CIS Benchmarks, regulatory compliance, security frameworks, continuous compliance, and audit readiness.
• Provide expertise across compliance frameworks such as CIS, NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, FedRAMP, and other industry and regulatory standards.
• Work closely with support and engineering teams to troubleshoot complex compliance, policy, scanning, control, and deployment challenges and drive issues to resolution.
• Collaborate with Product Management and Engineering to translate customer requirements into product enhancements, features, and roadmap priorities.
• Assist the sales team with RFPs/RFIs, customer workshops, technical discovery, POCs, Beta engagements, and solution validation.
• Create targeted technical content, including pitch decks, solution briefs, use cases, demo videos, technical blogs, whitepapers, and compliance best-practice content.
• Deliver sales, partner, and internal technical training, keeping teams updated on the latest compliance capabilities, use cases, and competitive positioning.
• Analyze the competitive landscape, develop competitive intelligence, and train sales teams on positioning compliance solutions against competing security and configuration assessment platforms.
• Collaborate with Product Marketing to develop compelling product collateral, demonstrations, customer stories, and go-to-market content.
• Identify opportunities to improve customer adoption, compliance maturity, audit readiness, and expansion into broader compliance use cases.

Required Qualifications:

• 5+ years of experience in solution engineering, pre-sales systems engineering, technical consulting, product SME, compliance consulting, or a similar customer-facing technical role.
• Strong hands-on knowledge of security configuration management, compliance assessment, policy auditing, and configuration hardening.
• Experience working with CIS Benchmarks and security/compliance frameworks such as NIST, PCI DSS, ISO 27001, DISA STIG, CMMC, or FedRAMP.
• Good understanding of vulnerability management, security configuration assessment, continuous compliance, and audit readiness.
• Hands-on experience with Windows, Linux/Unix, databases, and enterprise infrastructure technologies.
• Familiarity with REST APIs, automation, scripting, and integrations is an advantage.
• Experience with enterprise security and compliance platforms is preferred.
• Excellent analytical, written, presentation, and verbal communication skills, with the ability to explain complex compliance and technical requirements in simple business terms.
• Strong customer-facing skills with the ability to conduct technical workshops, product demonstrations, POCs, and executive-level discussions.
• Comfortable handling conflicts and capable of influencing cross-functional teams without formal authority.
• Ability to work effectively across customers, sales, support, engineering, product management, and marketing teams.
• Bachelor's/Master's degree in Computer Science, Computer Engineering, Information Security, or equivalent experience.

Qualys is an Equal Opportunity Employer, please see our EEO policy.