Jonathan Trull

About Jonathan Trull

With over 20 years of experience in technology and cybersecurity, I am the Chief Security Officer and Head of Solutions Architecture at Qualys, a leading provider of cloud-based security and compliance solutions. I am responsible for all aspects of corporate and product security, as well as overseeing the Qualys Enterprise Risk Management governance process with direct accountability to the Board of Directors.I am passionate about supporting the broader security community and mentoring future leaders in this field. I am a distinguished faculty member at Carnegie Mellon University\'s cybersecurity program, a co-author of a book on Microsoft Azure Sentinel, and a recipient of the SANS Institute\'s award for making a difference in cybersecurity. I also collaborate with groups such as the Cloud Security Alliance, the Center for Internet Security, and IANS to develop and share innovative approaches to stop cybercriminals and protect organizations. My specialties include cybersecurity strategy, product development, organization management, operationalizing digital transformations, and team development.

Experience

1. EVP & Gm, Risk Management Business CISO

   Qualys

   Nov 2025 — Present

   Leads the Qualys Enterprise TruRisk Management business helping customers Measure, Communicate, and Eliminate Risk. Focused on rapid innovation and accelerating the growth of Qualys\' new flagship product and platform capabilities. Provide oversight and governance across all cyber security components at Qualys.

Education

• Harvard Business School

  Program for Leadership Development, Harvard Executive MBA

  2020 — 2021

• Carnegie Mellon University - Heinz College of Information Systems and Public Policy

  CISO Executive Certification

  2018 — 2019

• University of North Texas

  Master's degree, Public Administration

  2000 — 2002

• University of Colorado Boulder

  Computer Science

Skills

• Government
• Policy
• Information Assurance
• Security Clearance
• Dod
• Security
• Homeland Security
• Military Operations
• Strategic Planning
• Security Management
• Military
• Program Management
• Information Security Management
• National Security
• Defense
• Physical Security
• Analysis
• Team Leadership
• Enforcement
• Leadership
• Operations Management
• Information Security
• Emergency Management
• Risk Assessment
• Team Building
• Cissp
• Computer Forensics
• Intelligence
• Computer Security
• Intelligence Analysis
• Network Security
• Security Audits
• Security+
• Vulnerability Assessment
• Penetration Testing
• Risk Management
• Information Technology
• U.s. Department of Defense