Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Why Qualys
Qualys is the only risk-based vulnerability management platform operating at FedRAMP High authorization , trusted by agencies and enterprises that safeguard the nation's most critical systems. As a Federal CTSO, you will join the Public Sector Solutions organization to shape how government agencies implement modern cybersecurity practices at scale, driving the adoption of Continuous Threat and Exposure Management and broad portfolio of products aimed to help agencies measure, prioritize, and eliminate threats more effectively. You will ensure that Qualys continues to lead in enabling the federal sector to align cybersecurity with mission risk, strengthen resilience, and secure national missions with data-driven precision.
Overview
The Federal CTSO will serve as the senior technical leader and trusted advisor for U.S. Federal agencies and regulated commercial providers. This role highlights your technical depth with national cybersecurity leadership experience, supporting Qualys customers directly in support of mission outcomes. Successful candidates in this role can point to how they have empowered customers to achieve mission outcomes (e.g., advancing continuous monitoring outcomes, operational resilience, or cloud adoption) rather than just "check-the-box" compliance.
As the Federal CTSO , you will be the face of Qualys' security leadership in government forums, a strategic advisor to CISOs and security executives, and a driver of product innovation aligned to federal security mandates. This role combines customer engagement, thought leadership, and internal influence to shape how Qualys advances the state of cybersecurity across the public sector.
Key Responsibilities
Advisory & Thought Leadership
- Deliver tailored executive briefings (30%) to CISOs, security leaders, and risk management teams, framing Qualys' capabilities in the context of advancing their mission and assurance needs.
- Lead workshops and tabletop exercises (30%) to address industry threats, evolving mandates, and best practices in operational resilience.
- Support sales and marketing enablement (20%), ensuring federal customers clearly understand how Qualys helps them achieve both compliance and operational outcomes.
- Drive thought leadership (10%) by publishing whitepapers, blogs, and representing Qualys at national conferences.
- Participate in industry advocacy (10%) through NIST, FedRAMP, CISA, and other working groups to influence future standards.
Customer Engagement & Trust Building
Facilitate customer risk workshops to align product capabilities and threat management engagements with FedRAMP, CMMC, DISA SRG, and other frameworks.Translate federal mandates into actionable security roadmaps , ensuring Qualys capabilities map to customer outcomes.Provide strategic incident response guidance during high-profile security events (e.g., Log4j-class vulnerabilities).Help customers adapt to evolving compliance programs (e.g., FedRAMP 20X, DISA, CMMC v2).Sales Enablement & Strategic Support
Join strategic sales engagements to address security due diligence and differentiation.Provide RFP / RFI expertise to ensure accurate representation of Qualys' security strengths.Articulate competitive differentiation in regulated markets, emphasizing FedRAMP High authorization and advanced risk-based capabilities.Demonstrate how Qualys ATO'd products accelerate market access for customers in regulated industries.Product & GTM Feedback Loop
Capture customer-driven product feedback and partner with sales, product, and engineering to close gaps.Serve as a design partner liaison with key federal customers to validate security features.Support GTM activities by leading customer engagements, partnering with sales and marketing, and adding your voice to how we deliver .Influence & Readiness
Help shape Qualys' federal security narrative and strengthen executive messaging.Monitor and elevate evolving federal policies and threats, advising both internal and external stakeholdersAct as a calming, credible presence during escalations with high-profile government customers.Strategic Initiatives
Serve as the Voice of the CISO to internal product and GTM teams, ensuring federal perspectives shape priorities.Build federal customer communities to co-create roadmaps and innovations.Advise on certification requirements (NIAP, CMMC, IL- 5 , etc.) to expand market access.Qualifications
10+ years in cybersecurity with direct experience advising U.S. federal agencies or regulated critical infrastructure.Deep knowledge of federal compliance and security standards (FedRAMP, FISMA, CMMC, NIST SP 800-53 / 171, DISA SRG).Demonstrated expertise in security architecture, risk management, vulnerability management , and security program leadership.Recognized presence in the cybersecurity community through public speaking, publications, or standards body involvement .Excellent executive communication skills , able to influence both technical and policy-level stakeholders.U.S. citizenship with ability to obtain a TS / SCI clearance .Must be located in the Washington, D.C. / National Capital Region (VA, DC, MD)#LI-Remote
The salary range for this position is $170,000 - $200,00 per year. Final compensation will be determined based on several factors, including but not limited to skills, relevant experience, and work location. Please note this range reflects base salary and does not include incentive compensation or potential equity grants. We also offer a comprehensive and highly competitive benefits package.
Qualys is an Equal Opportunity Employer, please see our EEO policy .