Staff Threat Researcher & Technical Evangelist
- Location
- Texas
- Listed
- Today
About the role
Come work at a place where innovation and teamwork come together to support the most exciting missions in the world!
About the role
The Qualys Threat Research Unit (TRU) is hiring a Staff Emerging Threats SME & Technical Evangelist. When a major vulnerability is disclosed, you'll decide how serious it is, write it up for the Qualys blog, and show customers how Qualys detects and remediates it. You'll also work closely with Product Management, Product Marketing, and Sales on webinars, campaigns, and strategic trials.
You'll also be the go-to subject matter expert for the TRU team, helping colleagues and customers understand new vulnerabilities and what they mean for them. This is a hands-on technical role that calls for a strong understanding of cybersecurity, vulnerabilities, and the threat landscape.
What you'll do
- Track new disclosures every day, including vendor advisories, CISA KEV, Patch Tuesday, PoC and exploit releases, and threat actor activity.
- Judge real-world risk quickly, looking at exploitability, active exploitation, exposure, and how widely the affected product is deployed.
- Reproduce high-profile issues in the lab/demo environment when needed.
- Write rapid-response blog posts for critical vulnerabilities, usually within 24 to 72 hours of disclosure. Cover impact, exploitation status, and how to detect and remediate with Qualys VMDR, TruRisk, and ETM.
- Prepare customer and executive briefings, and write technical and marketing reports on vulnerability and threat trends.
- Work closely with the research team to confirm coverage, explain technical details, and assess impact.
- Act as the team's subject matter expert on emerging vulnerabilities, explaining issues and their impact to other teams and customers.
- Support Sales, Support, and other teams on customer concerns and escalations that call for a technical discussion.
- Analyze anonymized Qualys backend data to spot trends and back up research with real numbers.
- Present webinars and conference talks, and brief media, analysts, and customers.
- Partner with Product Marketing on campaigns and with Sales Engineering on customer briefings and strategic trials.
- Help improve how customers stay informed about critical vulnerabilities and know what action to take.
- Bring field insight back to Product Management, such as coverage gaps and recurring customer asks.
What you bring
- 8+ years in cybersecurity, with at least 5 in threat research, vulnerability research, detection engineering, or vulnerability management.
- Strong working knowledge of the vulnerability lifecycle, including CVEs vs. exploits, N-day and zero-day, CVSS, EPSS, and KEV.
- A record of published research. Please include links to blogs, advisories, or talks with your application.
- Experience building detections, IPS signatures, or virtual patches that shipped in a product.
- Solid coding skills in Python or a similar language, and the ability to read a PoC and reproduce it.
- Basic data science skills for working with large, anonymized datasets in Python, SQL, or similar.
- Working knowledge of Windows, Linux, web applications, cloud, and containers.
- Clear, fast writing and confidence presenting to customers, CISOs, and press.
- Comfortable being the technical point of contact, explaining complex issues clearly and handling customer concerns with patience.
- Strong PowerPoint skills for building briefings, webinar decks, and customer presentations.
- Hands-on use of AI tools in your daily work to research, write, and analyze faster.
- Some project management experience, enough to run several deliverables at once and keep work on schedule.
- Willingness to work across US, EMEA, and India time zones and to respond after hours when a critical vulnerability breaks.
- Bachelor's degree in computer science or a related field, or equivalent experience.
Nice to have
- Contributions to industry security frameworks or talks at major security conferences
- Experience with coordinated disclosure or bug bounty programs
- Background in exposure management, CTEM, or attack validation
- CISSP, OSCP, or GIAC certification
- #Remote
- Qualys is an Equal Opportunity Employer, please see our EEO policy.
From Qualys's careers page, first listed on Rolev.ai on November 15, 2026. Rolev.ai is not the employer.
How Rolev.ai helps with this application
Rolev.ai is a job search and application tool for US job seekers. For this Staff Threat Researcher & Technical Evangelist role at Qualys, it shows how your resume fits, tailors your resume to the posting, and prepares the application for you to review.
See how you fit
Openings from employer career sites are ranked against your whole resume—and searchable inside Claude, ChatGPT, and Cursor via Rolev.ai MCP.
Tailor without inventing
Every change to your resume is checked against your original. New experience goes in only with your yes—zero fabricated claims.
Draft the full kit
Tailored and Full Match resumes, role-specific cover letters, and answers to employer screening questions are prepared in seconds.
1-Click Extension Autofill
The Chrome extension fills the employer's Greenhouse, Workday, Lever, or Ashby form in 1 click. You review it and press Submit.
Common questions
Where is the Staff Threat Researcher & Technical Evangelist job at Qualys located?
This Staff Threat Researcher & Technical Evangelist position at Qualys is located in Texas. Always check Qualys's application page for specific state eligibility or relocation policies.
How do I apply for the Staff Threat Researcher & Technical Evangelist position at Qualys?
This listing links directly to Qualys's Workday application page. You can apply directly on Qualys's site, or use Rolev.ai to check your resume fit, generate a zero-hallucination tailored resume and cover letter for this posting, and autofill the Workday application form in 1 click with the Rolev.ai Chrome extension. You always review the form and press Submit yourself.