Lead Product Manager, AI-SOC

This is a fully remote position, open to applicants in California.

📋 Description

• Define and uphold a comprehensive library of investigation playbooks and queries across various alert types, data sources, and severity levels.

• Collaborate with engineering and data teams to establish telemetry and schema requirements for new log sources and alert integrations.

• Manage status disposition logic and the suppression framework, transitioning from rule-based heuristics to a machine learning-driven disposition engine.

• Integrate threat intelligence, including IOC matching, actor context, and TTP enrichment, into automated investigation workflows.

• Set and monitor quality metrics such as coverage rate, disposition accuracy, and false positive rates.

• Utilize feedback loops from MDR analysts to enhance the quality of autonomous investigations.

• Work alongside MDR operations to ensure the outputs meet the quality standards necessary to replace manual Tier 1–2 triage at scale.

• Define and implement the strategy for Rapid7’s autonomous investigation platform.

• Convert Detection & Response expertise into a high-impact product roadmap.

⛳️ Requirements

• Over 7 years of experience in security operations, alert triage, detection engineering, or security engineering within an MDR, MSSP, or enterprise SOC setting.

• Extensive working knowledge of Detection & Response across endpoint, network, identity, cloud, or SaaS/email domains.

• Hands-on experience with major EDR/XDR platforms, including writing queries, reviewing telemetry, and making defensible disposition decisions.

• Strong command of investigation methodologies and the MITRE ATT&CK framework.

• At least 2 years in product management or a similar SOC leadership role, translating domain expertise into engineering requirements.

• Capability to tackle complex product challenges and foster operational momentum among diverse stakeholder groups.

• Ability to establish ownership and accountability for delivery outcomes, quality metrics, and operational commitments.

• Skill in building cross-functional networks across engineering, data science, and security operations.

• Proficiency in driving change when shifting legacy operations towards AI-driven autonomous workflows.

• Excellent written and verbal communication abilities.

• US Citizenship with active or prior security clearance experience in federal or government settings.

• Alignment with Rapid7’s core values.

🏝️ Benefits

• Comprehensive health, dental, and vision insurance plans.

• Generous paid time off and holiday policies.

• Opportunities for professional development and career advancement.

• Flexible work environment and remote work options.