Senior Product Manager, Scanner

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of the accuracy, coverage, and delivery of essential product metrics.

• Facilitate the feedback loop between Engineering and Product Security to enhance detection quality.

• Develop workflows for the review, escalation, and rectification of detections.

• Outline the roadmap for Chainguard's shared scanning platform.

• Expand the scanner’s capabilities beyond Libraries to include Containers, Agent Skills, and forthcoming artifact types.

• Balance investments in detection quality, performance, and extensibility.

• Enhance malware and greyware detection capabilities.

• Collaborate with Product Security to identify emerging threats and produce actionable intelligence.

• Establish how customers investigate, enforce, and contest scanner findings.

• Create user-friendly workflows for policy management and enterprise-level operations.

• Collaborate with Engineering and Product Security to define how organizations assess software trust in an AI-driven landscape.

⛳️ Requirements

• 5+ years of experience in Product Management focusing on developer tools, infrastructure, security, or platform products.

• Proven experience managing highly technical platforms or backend infrastructure that serves multiple products or internal customers.

• Strong grasp of software supply chain security, malware detection, vulnerability management, or related security domains.

• Track record of making product prioritization choices in technically intricate and ambiguous settings.

• Cross-functional leadership abilities to influence Engineering, Security, Design, and GTM teams.

• Experience in guiding products or platform capabilities from initial concept through customer adoption and ongoing improvement.

• Technical credibility and comfort discussing architecture, distributed systems, APIs, and security concepts with engineering teams.

• Nice to have: experience in malware detection, static analysis, software composition analysis (SCA), or vulnerability scanning.

• Nice to have: familiarity with npm, PyPI, Maven, Go modules, or container registries.

• Nice to have: experience in developing reusable platform capabilities that support multiple products.

• Nice to have: background in cloud infrastructure, software supply chain security, or enterprise security platforms.

• Nice to have: experience with AI-assisted security analysis or automated threat detection systems.

🏝️ Benefits

• Work remotely with opportunities for team meetups.

• Bi-annual destination summits.

• Monthly stipend for coworking spaces, phone, and internet expenses.

• Stock options available upon hiring and promotion.

• Participation in secondary offerings.

• 10 years to exercise stock options.

• 100% coverage of health, vision, and dental insurance premiums for employees and their dependents.

• Flexible time off policy.

• 18 weeks of paid parental leave for birthing parents.

• 12 weeks of paid parental leave for non-birthing parents.

• Option to utilize parental leave all at once or spread throughout the child's first year.