Technical Product Manager, Security Tooling

ABOUT THE TEAM

ABOUT THE JOB

This is a Product Manager who will act as the "CEO" for internal security software products. They will be embedded within the Information Security org, working closely with security engineers to build the tools and platforms that make the entire company more secure. Their "customers" are other internal teams, primarily developers and security professionals.

WHAT YOU’LL DO

• Define the "What, Why, and For Whom" for our core security products and platforms. You will own the long-term vision, strategy, and roadmap for critical services (e.g., security automation, developer tooling, vulnerability management) that empower our engineering organization to build secure, reliable software at scale.
• Develop a multi-product roadmap and strategic direction. You will own and maintain strategic roadmaps for several distinct security products and services. This requires synthesizing the diverse and often varying needs of multiple internal teams (your customers) into a cohesive product strategy that improves the company's security posture and aligns with key risk objectives.
• Synthesize diverse stakeholder needs into unified product definitions. Act as the primary interface to your customers—Application Developers, Security Engineers, and SREs—proactively engaging to understand their workflows, security challenges, and pain points. You will identify common underlying requirements and recommend standardized platform solutions that reduce risk and accelerate development cycles.
• Drive product definition and requirements for complex security software. Translate strategic objectives and stakeholder needs into detailed Product Requirements Documents (PRDs), epics, and user stories. This includes defining service capabilities, API contracts, user experiences, and key performance indicators (KPIs). You'll work hand-in-hand with engineering to define architectures that balance security effectiveness, developer experience, scalability, and operational cost.
• Prioritize and manage trade-offs for maximum security impact. Evaluate new security threats, technology advancements, and stakeholder requests. You will prioritize features and initiatives based on strategic impact (e.g., risk reduction), technical feasibility, developer friction, and overall value to the organization, always with an eye towards building a scalable and sustainable security ecosystem.
• Accelerate internal adoption and measure impact. Proactively engage with engineering teams to champion your products, demonstrate their value in reducing risk and improving velocity, and drive adoption across the organization. You will define and track success metrics to ensure your products are meeting their goals and delivering measurable value.
• Drive new product development and business cases. Identify critical unmet security needs and strategic gaps in our tooling and platforms. You will lead the charge on new product initiatives, including opportunity sizing, "build vs. buy" analysis, developing robust business cases focused on ROI (risk reduction, time saved), and authoring comprehensive PRDs from inception to launch.
• Be the voice of security innovation, internally and externally. Stay on the cutting edge of the security landscape, researching emerging threats, new vendor technologies, and innovative open-source solutions. You will be a key voice in our "build vs. buy" decisions, championing the best path forward to protect the company and potentially contributing back to the open-source community.
• Communicate your product vision and strategy. Articulate and champion the product vision, strategy, and value proposition of your security platforms to engineering teams, security leadership, and executive stakeholders. You will manage expectations, identify key risks, and ensure clear, consistent communication about product roadmaps, capabilities, and key results.

REQUIRED QUALIFICATIONS

• Experience: 5+ years in software product management, specifically with internal tools or platforms.
• Ownership: A proven "can-do" leader who can own a product strategy from start to finish, managing multiple priorities at once
• Business Acumen: Can justify why a security tool should be built, using data to show its value in terms of saved time, reduced risk, or improved efficiency.
• Requirement Gathering: Masterful at talking to highly technical teams, understanding their pain points, and translating those conversations into concrete engineering tasks.
• Communication: Can explain a complex security trade-off to an executive and a detailed user story to an engineer with equal clarity.
• Drive: You Thrive in a fast-paced, cross-functional setting and is relentless in pushing high-impact projects across the finish line.

PREFERRED QUALIFICATIONS

• Domain Expert: You have worked in a security org before and already speak the language of AppSec, Cloud Security, and DevSecOps. They know what SAST and DAST are without having to look them up.
• Developer-Focused: You understand that the best security tools are the ones developers actually want to use. You are obsessed with creating frictionless, intuitive security solutions.
• Technical Fluency: You have hands-on experience working with teams building the exact kinds of tools this role will own (e.g., vulnerability scanners, automation platforms, IAM services).
• Visual Communicator: They naturally use diagrams and mockups to align teams on complex architectures and workflows.
• Influencer: You are skilled at building relationships and influencing other teams to adopt their products and align with their security vision.