Product Manager: Security
Own the direction and quality bar for an AI-driven application security scanner, shaping detection capabilities, findings workflows, and AppSec buyer adoption. Requires 5–8 years of security experience, strong technical product management skills, and deep knowledge of vulnerability detection and exploitation.
About the job
Responsibilities
- Own the security product end to end, including deep codebase scans and security findings in pull request reviews.
- Set roadmap priorities across SAST, secrets detection, infrastructure-as-code misconfiguration, dependency, and supply-chain analysis.
- Define detection-quality standards, including precision, recall, severity, exploitability, and acceptable noise.
- Lead the findings experience: triage, dismissal and feedback loops, remediation flows, reporting, and severity grading.
- Translate benchmarks, evaluations, and real-world detection results into product decisions and customer-facing proof.
- Own the AppSec and CISO buyer perspective alongside developer users.
- Partner with Sales on enterprise security evaluations and competitive positioning.
- Shape pricing and packaging with Growth and Finance.
- Work daily with engineers building the agentic scanning pipeline and establish the quality bar for shipped detection changes.
Requirements
- 5–8 years of experience in the security space through security product management or hands-on application security, penetration testing, vulnerability research, or detection engineering.
- Product management experience with deeply technical products, ideally in B2B SaaS or developer tools.
- Practical knowledge of vulnerability classes and exploitation, including the ability to evaluate severity and disputed false positives.
- Knowledge of SAST, DAST, secrets scanning, IaC security, and software composition analysis.
- Technical fluency sufficient to read code, understand APIs, and collaborate closely with engineers.
- Strong written and verbal communication skills, including experience writing PRDs and tickets.
- Ability to work through ambiguity, create clear specifications, and operate with high ownership.
Nice-to-Haves
- Hands-on practitioner experience with CVEs, bug bounties, CTFs, or penetration-testing findings.
- Experience shipping products built on LLMs or agentic systems.
- Vendor-side experience in SAST, ASPM, or software composition analysis.
- Working knowledge of GitHub, GitLab, Bitbucket, or Azure DevOps.
Compensation and Benefits
- Competitive salary, equity, and benefits.
- Professional development opportunities.
- Opportunity to work on cutting-edge technology with real-world impact in a collaborative environment.
Skills
SAST, DAST, Secrets Scanning, Infrastructure As Code, Software Composition Analysis, Vulnerability Research, Application Security, Penetration Testing, Detection Engineering, LLMs, Agentic Systems, APIs, GitHub, GitLab, Bitbucket
Similar jobs
Product Management jobs
Origin
Bengaluru, India
Own the roadmap and deployment of core robotics products, partnering with engineering, customers, and commercial teams. The role requires 3–6 years of product management experience, strong technical understanding, and a bachelor's degree or equivalent experience.
Chess.com
Remote
Own and grow the Dr. Wolf chess-learning product end to end, combining product strategy, user research, business metrics, and hands-on iOS and Android development with agentic AI coding tools. The role suits an independent builder who cares deeply about chess education.
Flaglerhealth
Remote
Own the end-to-end revenue cycle product roadmap across eligibility, prior authorizations, claims-adjacent workflows, and EHR integrations. The role requires 5+ years in product management, direct RCM experience, strong cross-functional communication, and comfort operating autonomously in a startup.
LeafLink
Remote
Leads strategy and execution for regulated payments and banking products, partnering with financial institutions, fintech providers, and cross-functional teams. Requires 5+ years of product management experience in digital payments or banking, plus expertise in APIs, compliance, and embedded finance.
Clickhouse
Remote
Own the roadmap and lifecycle of agentic analytics products, partnering with customers and cross-functional teams to improve agent quality, trust, latency, and cost. Requires 3+ years of product management experience plus hands-on experience with LLMs, agentic workflows, SQL, and analytical databases.