Senior Product Manager, Security Research

Location: US West/Foster City

About the Qualys Threat Research Unit (TRU)

You will be joining the heartbeat of Qualys—a world-renowned team of over 120 \"white hat\" experts dedicated to staying ahead of the adversary. We don\u2019t just track threats; we define the defense. We are four-time Pwnie Award winners (the \"Oscars\" of hacking), recognized for Epic Achievement and discovering critical zero-day vulnerabilities in software such as OpenSSH and glibc.

Key Responsibilities

Strategic Roadmap & Data-Driven Prioritization Utilize your hands-on fluency in data analytics (Salesforce, Jira, SQL) to analyze feature impact and prioritize the roadmap based on empirical evidence rather than opinion. Manage the delicate balance of adding/removing roadmap items through collaboration with Engineering, Marketing, and Product leadership. Transform high-level vision into precise technical requirements and prioritized backlogs. Collaborate with PMM and Sales to ensure features provide a competitive advantage and are positioned correctly in the market.

Customer Discovery & Solution Design Lead discovery sessions to identify root pain points. Move beyond solving single-customer issues to designing scalable solutions that benefit the entire user base. Manage incoming requests and new cases with a systematic approach to review, validation, and communication with stakeholders. Serve as a technical resource by writing impactful blog posts, leading webinars, and defining best practices that help organizations reduce risk, independent of specific product features. Empower the Sales team and Strategic Accounts with compelling product pitches, demos, and deep-dive explanations of complex security capabilities.

Qualifications

5+ years in Product Management with at least 3 years specifically in Cybersecurity (VM, EDR, or Threat Intel). Alternatively: 8+ years in technical leadership/security engineering with a pivot to Product. Deep understanding of the threat landscape (Zero-days, CVEs, Exploits). You are familiar with the distinction between a CVE and an exploit and understand how SOC/IT teams function. Bachelor\u2019s degree in computer science, Engineering, or related field (MBA is a plus). Proficiency in Python and SQL (or similar scripting languages) is required. Exceptional ability to communicate across multiple time zones and effectively engage stakeholders from field sales to executive leadership.

Preferred & Bonus

Researcher-to-Product Transition: We highly prefer candidates with a background in Threat Research who are looking to pivot into Product Management while leveraging their deep security expertise.
Domain Expertise: Strong background in Vulnerability Management (VM), Exposure Management, or Risk Management.

The salary range for this position is $145,000 - $175,000 per year. Final compensation will be determined based on several factors, including but not limited to skills, relevant experience, and work location. Please note this range reflects base salary and does not include incentive compensation or potential equity grants. We also offer a comprehensive and highly competitive benefits package.

Qualys is an Equal Opportunity Employer, please see our EEO policy.

Qualys, Inc. (NASDAQ: QLYS) is a pioneer and leading provider of disruptive cloud-based security, compliance and IT solutions with more than 10,000 subscription customers worldwide, including a majority of the Forbes Global 100 and Fortune 100. Qualys helps organizations streamline and automate their security and compliance solutions onto a single platform for greater agility, better business outcomes, and substantial cost savings.