Principal Product Manager, Security

This is a fully remote position, open to applicants in United States, +1 more country.

📋 Description

• Collaborate with product managers and feature teams from the outset to pinpoint security requirements and assess threat-model impacts.

• Ensure that security needs are clearly visible, prioritized, and appropriately resourced.

• Convert the needs of feature teams into prioritized security tasks.

• Make Security Engineering priorities transparent across the organization.

• Manage the independent roadmap for platform-level security investments, which includes key management and recovery, cryptographic foundations, authentication, and preparedness for post-quantum cryptography.

• Establish strategies for agentic access to credentials and secrets for non-human identities and AI agents, as well as trust models related to tools and protocols such as MCP.

• Evaluate real-world security risks against user friction by analyzing adoption, support, and telemetry data.

• Document and justify accepted residual-risk decisions.

• Interact with security researchers and oversee the bug bounty program.

• Present at conferences and contribute to the credential-security community.

• Mentor product managers on security considerations and elevate the standards for security-critical product development.

• Define and advocate for product strategy, prioritize tasks, collaborate across Engineering, Design, Security Research, and GTM, and assess quality and business outcomes.

⛳️ Requirements

• Over 10 years of experience in product management, including substantial involvement with security-critical products or platforms in a SaaS setting.

• Exceptional candidates with a similar level of experience, such as security engineers or researchers who transitioned into product roles, will also be considered.

• Extensive knowledge of cryptography, authentication protocols, identity and access management, zero-knowledge and end-to-end encrypted system design, and threat modeling.

• Proficient understanding of the credential and identity landscape, including passkeys and WebAuthn/FIDO.

• Proven track record of gaining credibility with security engineering teams.

• Competence in interpreting and reasoning through technical specifications, security audits, and cryptographic design documents.

• Experience in making and defending risk-based trade-offs.

• History of delivering security features that users embrace while utilizing friction and adoption data for enhancements.

• Experience in setting strategies at the platform or infrastructure level and influencing roadmaps without formal authority.

• Ability to convey information clearly from a security research paper to an executive summary.

• Strong perspective on changes within the security landscape and the ability to relate them to roadmap decisions.

• Established presence in the security community through conference presentations, publications, research, open-source contributions, or standards involvement is a strong advantage.

• Hands-on experience in AI security is a strong plus.

• Familiarity with SOC 2, FedRAMP, or FIPS is a strong plus.

• Previous experience in vulnerability disclosure, incident response, or threat intelligence is a strong plus.

• Background in running or closely collaborating with a bug bounty program or researcher community is a strong plus.

• Must already be legally authorized to work in the United States or Canada; no work authorization, relocation assistance, or visa sponsorship will be provided.

• Successful candidates must pass a background check.

🏝️ Benefits

• 15% annual bonus.

• Health benefits.

• Dental benefits.

• 401(k) or RRSP, depending on the country.

• Generous paid time off.

• Equity grant / RSU program for most employees.

• Incentive programs, where applicable.

• Maternity and parental leave top-up programs.

• Retirement matching program.

• Free 1Password account.

• Paid volunteer days.

• Peer-to-peer recognition through Bonusly.

• Remote-first work environment.

• Opportunities for travel for in-person engagement, including offsites, team meetings, and customer/industry events.

• Accommodation available upon request during recruitment.