Principal Product Manager, Exposure Management (Cybersecurity)

Location: USA — Sunnyvale, California; required to work from an office 1–3 days per week

Salary: $160,000–$250,000 per year, plus potential bonuses, equity, and benefits.

Company

Cybersecurity company providing an AI-native platform for preventing breaches and protecting modern organizations.

What you will do

• Own the strategy and roadmap for compensating-controls integration and exploitability analysis within Exposure Management.
• Lead a third-party connector framework integrating signals from EDR/EPP, firewalls, IAM/PAM, patch management, and other security tools.
• Partner with data science and threat intelligence teams to develop exploitability scoring using vulnerability data, business context, compensating controls, and adversary TTPs.
• Engage enterprise customers, sales engineers, and support teams to validate connector priorities and exploitability logic.
• Define platform health metrics covering connector coverage, signal freshness and accuracy, model precision and recall, and customer adoption.
• Represent the product externally and mentor product managers across the Exposure Management team.

Requirements

• 8+ years of product management experience or equivalent experience in offensive security, red teaming, penetration testing, vulnerability management, or exposure management.
• Hands-on understanding of offensive security, exploitation techniques, attack paths, and adversary tradecraft.
• Strong vulnerability management expertise and experience integrating third-party security tools through APIs.
• Experience with cloud technologies and security concepts across AWS, Azure, and GCP.
• Experience leading product or platform strategy in complex, cross-functional environments and influencing without direct authority.
• BS degree in a relevant field; a Master's degree is preferred.

Nice to have

• Practitioner experience as a penetration tester, red teamer, or offensive security researcher.
• Experience with attack path analysis, breach and attack simulation tools, or graph-based attack surface modeling.
• Familiarity with CAASM concepts and cyber asset data models.

Culture & Benefits

• Flexible, autonomous work environment with an emphasis on responsible AI adoption and innovation.
• Health and wellness programs, paid time off, and paid parental and adoption leave.
• Professional development opportunities, employee networks, and volunteer programs.
• Compensation package includes equity awards and comprehensive U.S. benefits such as health insurance and a 401(k).
• Office environment with on-site amenities.