[Hiring] Staff Threat Researcher & Technical Evangelist @Qualys

Role Description

The Qualys Threat Research Unit (TRU) is hiring a Staff Emerging Threats SME & Technical Evangelist. This is a hands-on technical role that calls for a strong understanding of cybersecurity, vulnerabilities, and the threat landscape.

• Track new disclosures every day, including vendor advisories, CISA KEV, Patch Tuesday, PoC and exploit releases, and threat actor activity.
• Judge real-world risk quickly, looking at exploitability, active exploitation, exposure, and how widely the affected product is deployed.
• Reproduce high-profile issues in the lab/demo environment when needed.
• Write rapid-response blog posts for critical vulnerabilities, usually within 24 to 72 hours of disclosure. Cover impact, exploitation status, and how to detect and remediate with Qualys VMDR, TruRisk, and ETM.
• Prepare customer and executive briefings, and write technical and marketing reports on vulnerability and threat trends.
• Work closely with the research team to confirm coverage, explain technical details, and assess impact.
• Act as the team's subject matter expert on emerging vulnerabilities, explaining issues and their impact to other teams and customers.
• Support Sales, Support, and other teams on customer concerns and escalations that call for a technical discussion.
• Analyze anonymized Qualys backend data to spot trends and back up research with real numbers.
• Present webinars and conference talks, and brief media, analysts, and customers.
• Partner with Product Marketing on campaigns and with Sales Engineering on customer briefings and strategic trials.
• Help improve how customers stay informed about critical vulnerabilities and know what action to take.
• Bring field insight back to Product Management, such as coverage gaps and recurring customer asks.

Qualifications

• 8+ years in cybersecurity, with at least 5 in threat research, vulnerability research, detection engineering, or vulnerability management.
• Strong working knowledge of the vulnerability lifecycle, including CVEs vs. exploits, N-day and zero-day, CVSS, EPSS, and KEV.
• A record of published research. Please include links to blogs, advisories, or talks with your application.
• Experience building detections, IPS signatures, or virtual patches that shipped in a product.
• Solid coding skills in Python or a similar language, and the ability to read a PoC and reproduce it.
• Basic data science skills for working with large, anonymized datasets in Python, SQL, or similar.
• Working knowledge of Windows, Linux, web applications, cloud, and containers.
• Clear, fast writing and confidence presenting to customers, CISOs, and press.
• Comfortable being the technical point of contact, explaining complex issues clearly and handling customer concerns with patience.
• Strong PowerPoint skills for building briefings, webinar decks, and customer presentations.
• Hands-on use of AI tools in your daily work to research, write, and analyze faster.
• Some project management experience, enough to run several deliverables at once and keep work on schedule.
• Willingness to work across US, EMEA, and India time zones and to respond after hours when a critical vulnerability breaks.
• Bachelor's degree in computer science or a related field, or equivalent experience.

Nice to have

• Contributions to industry security frameworks or talks at major security conferences.
• Experience with coordinated disclosure or bug bounty programs.
• Background in exposure management, CTEM, or attack validation.
• CISSP, OSCP, or GIAC certification.

Company Description

Qualys is an Equal Opportunity Employer, please see our EEO policy.