Senior Product Manager, Attack Surface Management
Qualys · Pune, India
About this role
Qualys is hiring a senior-level Product Manager based in Pune, India. The posting calls out experience with API Development, Security, Agile, Performance Optimization.
- Role
- Product Manager
- Function
- product
- Level
- senior
- Track
- Individual contributor
- Employment
- Full-time
- Location
- Pune, India
- Posted
- Apr 20, 2026
More roles at Qualys
Job description
from Qualys careersCome work at a place where innovation and teamwork come together to support the most exciting missions in the world!
Senior Product Manager, Attack Surface Management
About Qualys
Qualys, Inc. (NASDAQ: QLYS) is a cloud security and compliance company with 10,000+ subscription customers worldwide, including many Forbes Global 100 and Fortune 100 organizations. Qualys helps teams consolidate security and compliance workflows on one platform to improve outcomes, increase agility, and reduce cost.
Role overview
This role owns Attack Surface Management as a core pillar of the Qualys TruRisk Platform, built on top of the Unified Inventory layer that powers ETM.
You will drive how Qualys discovers, attributes, correlates, and governs the external attack surface (EASM) & Internal Attack Surface and connects it to the broader enterprise inventory used by ETM across different asset types such as hosts, containers, cloud resources, SaaS services, and identities.
The goal is a single trusted inventory that enables ETM outcomes end-to-end:
• build a complete and continuously updated perimeter (internal & external)
• link exposures to vulnerabilities, misconfigurations, compliance and identity risk
• provide business context for prioritization, reporting, and TruRisk outcomes
• uncover and operationalize Shadow IT and unmanaged internet-facing assets
This is a platform-minded PM role combining CAASM-style inventory and EASM-style external discovery: multi-source ingestion, attribution and identity resolution, deduplication and reconciliation, governance workflows, and risk-ready insights.