Director/Sr Director, Product Management, Risk-Based Vulnerability Mgmt (RBVM) (San Mateo)

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!Job Description: Director/Sr Director of Product Management – RBVM, ASM, CTEM – Risk Operation Center (ROC)Date posted: April 2026About the jobCome work at a place where innovation and teamwork come together to support the most exciting missions in the world!Director/Sr Director of Product Management – RBVM, CTEM, ASM – Risk Operation Center (ROC)Location: Foster City, CA, USAOrganization: Product GTM & SMEReports To: SVP of Product ManagementRole OverviewQualys is seeking a Director / Sr. Director of Product Management to lead its flagship Risk-Based Vulnerability Management (RBVM) product powered by Qualys VMDR and drive the evolution toward Continuous Threat Exposure Management (CTEM) via Qualys ETM.This leader will own the end-to-end product strategy, execution, and business performance of VMDR, serving 8,000+ global customers, while driving the transition from vulnerability management risk-based prioritization autonomous remediation CTEM platform adoption.You will lead a team of 5+ product managers, partner with engineering, GTM, and field teams, and directly influence revenue growth, customer retention, and platform expansion.What You Will Be DoingProduct Ownership: VMDR (RBVM) This role sits at the intersection of VMDR (execution) ETM (risk platform), part of ROC (Risk Operation Center)What Makes This Role UniqueOwn Qualys’ flagship product (VMDR) used by thousands of enterprisesDrive transition from VM CTEM platform leadershipBuild Agentic AI–powered security workflowsDirect impact on revenue, growth, and company strategyLead the next evolution of cybersecurity: autonomous risk reductionStrategic Mandate (What You’ll Really Be Doing)This role is fundamentally about:Turning VMDR into the front door of Qualys platform growthUsing AI + workflows to drive customer expansion into ETMBuilding the industry’s first autonomous RemOps + CTEM platformKey ResponsibilitiesProduct Leadership - Own VMDR as a Business (P&L Mindset)Own product strategy, roadmap, and execution for VMDRLead and mentor a team of 5+ Product ManagersDrive innovation across:vulnerability prioritization (RBVM)remediation workflowsasset-risk correlationDeliver features that reduce MTTR and improve risk reduction outcomesBusiness Ownership (Revenue + Growth)Own end-to-end business metrics:ARR / revenue growth for VMDR product lineCustomer renewals and retentionCross-sell and upsell into:ETMCSAMPatch / Remediation solutionsPartner with GTM teams to:Drive pipeline generationEnable Sales with product positioningDefine pricing and packaging strategyCustomer-Centric Innovation (Short–Mid Term)Drive customer deal-breaker capabilities including:Scalable remediation workflows and automationBetter prioritization beyond CVSS (business context, exploitability)Improved reporting, dashboards, and executive insightsSeamless ITSM / DevOps integrationsCross-asset visibility (cloud, endpoint, identity)Translate customer friction product wins revenue growthLead RBVM CTEM EvolutionDefine roadmap to evolve VMDR into:Risk-based vulnerability management (RBVM)Exposure management platformCTEM-aligned workflowsBuild tight integration with:CSAM (asset context)ETM (risk aggregation and prioritization)Drive VMDR “Deal Breaker” Requirements (0–18 months)Identify and deliver top customer gaps blocking large deals, such as:Faster prioritization accuracy (TruRisk improvements)Better remediation workflows (ownership, SLA tracking)Reporting and executive dashboardsScalable performance for large enterprisesPartner with field (SEs, TAMs) to capture:Competitive lossesRenewal risksEnterprise feature gapsDesign Agentic AI Workflows (Next-Gen Differentiation)Lead innovation in Agentic AI-driven vulnerability remediation, including:Intelligent prioritization agents (what to fix first)Remediation planning agents (patch vs mitigate vs isolate)Workflow orchestration agents (who should fix it)Autonomous nudges and recommendationsSuccess MetricsVMDR revenue growth and market shareETM attach rate (VMDR ETM conversion)Customer retention and renewal ratesMTTR reduction across customer baseAdoption of new AI-driven featuresPipeline contribution and deal accelerationExperience required Experience working with platforms like Qualys and competitive vendor landscape focusing on RBVM, CTEM, AppSec, ASPM, CNAPP etc.10–15+ years in Product Management (cybersecurity preferred)Deep expertise in:Vulnerability ManagementRisk-Based VM (RBVM)Exposure Management / CTEMProven experience owning large-scale enterprise productsStrong understanding of:cloud, endpoint, identity, and application securityExperience working with:CISOs, CIOs, and security teamsPreferredExperience building AI/ML-driven security productsKnowledge of:attack surface managementremediation workflowsITSM / DevOps integrationsTrack record of:scaling products from platform ecosystemdriving upsell / cross-sell motionsProduct ContextQualys VMDRUnified platform to discover, assess, prioritize, and remediate vulnerabilities across hybrid environmentsAI-driven prioritization and integrated patch workflowsCore revenue engine and entry point for Qualys customersQualys CSAMContinuous asset discovery across IT, cloud, containers, identitiesProvides business context and asset criticality for risk prioritizationQualys ETMAggregates risk signals across Qualys and third-party toolsDelivers unified risk scoring, prioritization, and remediation orchestration ***The salary range for this position is $210,000 - $240,000 per year. Final compensation will be determined based on several factors, including but not limited to skills, relevant experience, and work location. Please note this range reflects base salary and does not include incentive compensation or potential equity grants. We also offer a comprehensive and highly competitive benefits package.Qualys is an Equal Opportunity Employer, please see our EEO policy.SummaryLocation: Foster CityType: Full time