Staff Threat Researcher & Technical Evangelist

Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!

About the role

The Qualys Threat Research Unit (TRU) is hiring a Staff Emerging Threats SME & Technical Evangelist. When a major vulnerability is disclosed, you'll decide how serious it is, write it up for the Qualys blog, and show customers how Qualys detects and remediates it. You'll also work closely with Product Management, Product Marketing, and Sales on webinars, campaigns, and strategic trials. You'll also be the go-to subject matter expert for the TRU team, helping colleagues and customers understand new vulnerabilities and what they mean for them. This is a hands-on technical role that calls for a strong understanding of cybersecurity, vulnerabilities, and the threat landscape.

What you'll do

• Track new disclosures every day, including vendor advisories, CISA KEV, Patch Tuesday, PoC and exploit releases, and threat actor activity.
• Judge real-world risk quickly, looking at exploitability, active exploitation, exposure, and how widely the affected product is deployed.
• Reproduce high-profile issues in the lab/demo environment when needed.
• Write rapid-response blog posts for critical vulnerabilities, usually within 24 to 72 hours of disclosure. Cover impact, exploitation status, and how to detect and remediate with Qualys VMDR, TruRisk, and ETM.
• Prepare customer and executive briefings, and write technical and marketing reports on vulnerability and threat trends.
• Work closely with the research team to confirm coverage, explain technical details, and assess impact.
• Act as the team's subject matter expert on emerging vulnerabilities, explaining issues and their impact to other teams and customers.
• Support Sales, Support, and other teams on customer concerns and escalations that call for a technical discussion.
• Analyze anonymized Qualys backend data to spot trends and back up research with real numbers.
• Present webinars and conference talks, and brief media, analysts, and customers.
• Partner with Product Marketing on campaigns and with Sales Engineering on customer briefings and strategic trials.
• Help improve how customers stay informed about critical vulnerabilities and know what action to take.
• Bring field insight back to Product Management, such as coverage gaps and recurring customer asks.

What you bring

• 8+ years in cybersecurity, with at least 5 in threat research, vulnerability research, detection engineering, or vulnerability management.
• Strong working knowledge of the vulnerability lifecycle, including CVEs vs. exploits, N-day and zero-day, CVSS, EPSS, and KEV.
• A record of published research. Please include links to blogs, advisories, or talks with your application.
• Experience building detections, IPS signatures, or virtual patches that shipped in a product.
• Solid coding skills in Python or a similar language, and the ability to read a PoC and reproduce it.
• Basic data science skills for working with large, anonymized datasets in Python, SQL, or similar.
• Working knowledge of Windows, Linux, web applications, cloud, and containers.
• Clear, fast writing and confidence presenting to customers, CISOs, and press.
• Comfortable being the technical point of contact, explaining complex issues clearly and handling customer concerns with patience.
• Strong PowerPoint skills for building briefings, webinar decks, and customer presentations.
• Hands-on use of AI tools in your daily work to research, write, and analyze faster.
• Some project management experience, enough to run several deliverables at once and keep work on schedule.
• Willingness to work across US, EMEA, and India time zones and to respond after hours when a critical vulnerability breaks.
• Bachelor's degree in computer science or a related field, or equivalent experience.

Nice to have

• Contributions to industry security frameworks or talks at major security conferences
• Experience with coordinated disclosure or bug bounty programs
• Background in exposure management, CTEM, or attack validation
• CISSP, OSCP, or GIAC certification

#Remote

Qualys is an Equal Opportunity Employer, please see our EEO policy.