Senior Product Manager, Secret Detection, Vulnerability Research

This is a fully remote position, open to applicants in United States.

📋 Description

• Take ownership of business results for Secret Detection and Vulnerability Research, focusing on adoption, growth, competitive success rates, and revenue contributions.

• Develop a comprehensive strategy for the entire secret lifecycle across GitLab.com, Dedicated, and Self-Managed environments.

• Approach detection content as a product by establishing processes for sourcing, validation, versioning, measurement, and customer-facing quality.

• Manage detection-quality metrics to enhance precision while minimizing false positives.

• Analyze rule syntax, entropy heuristics, scanner deficiencies, detection logic, data pipelines, and CI integration.

• Leverage AI for research, analysis, data extraction, prototyping, drafting, triage, rule generation, guidance on remediation, and alleviating the review burden on humans.

• Collaborate with engineering, security research, threat intelligence, Field, and GitLab Security teams.

• Communicate effectively and asynchronously to enable distributed teams to act independently without the need for meetings.

⛳️ Requirements

• Deep knowledge in application security, vulnerability management, or security research.

• Experience with or related to scanners, detection content, threat intelligence, or security tooling within the SDLC.

• Insight into how security products are assessed in competitive evaluations.

• Technical expertise to analyze detection logic, data pipelines, CI integration, and the trade-offs between coverage and noise.

• Commercial acumen centered on revenue mechanics, buyer behavior, and competitive positioning.

• Proven track record of utilizing AI as a force multiplier for research, analysis, data extraction, prototyping, or drafting tasks.

• Sound judgment in ambiguous situations, with the capability to offer structured options and recommendations.

• Proficiency in transforming complex, technical, and politically sensitive issues into clear alignment documents.

• Bonus: hands-on experience as a developer, security engineer, red team member, or researcher.

• Bonus: familiarity with credential and token ecosystems.

• Bonus: experience in monetizing a data or intelligence asset.

🏝️ Benefits

• Comprehensive benefits to support your health, finances, and overall well-being.

• Flexible Paid Time Off.

• Team Member Resource Groups.

• Equity Compensation & Employee Stock Purchase Plan.

• Growth and Development Fund.

• Parental Leave.