Security Product Manager (Cybersecurity)

TL;DR

Security Product Manager (Cybersecurity): Defining and driving the vision, strategy, and roadmap for security and compliance capabilities across the Windows ecosystem with an accent on regulatory readiness and secure software supply chains. Focus on translating complex security requirements into scalable platform capabilities and influencing engineering decisions across Windows services and AI environments.

Location: Remote within specific US states (AL, CA, CO, GA, IA, MD, MI, MN, MS, MO, NJ, NY, NC, OR, PA, SC, TX, UT, VA, WA). Collaboration with teammates in Pacific time zone is essential.

Salary: $95,000 – $105,000 per year

Company

A consulting firm specializing in helping large technology enterprises define, manage, benchmark, and market their solutions and services.

What you will do

• Own the vision, strategy, roadmap, and investment priorities for Windows security compliance and assurance capabilities.
• Serve as a Security SME and trusted advisor to influence architecture and engineering decisions across platform, services, and infrastructure domains.
• Identify security and compliance gaps to drive product investments and improve regulatory readiness (e.g., FedRAMP, FIPS, NIST).
• Translate complex security, customer, and regulatory requirements into scalable platform capabilities and engineering solutions.
• Partner with engineering teams to design secure-by-design and AI-enabled capabilities for improved governance and audit readiness.
• Define success metrics and use data-driven insights to drive adoption and continuous improvement in compliance.

Requirements

• 6+ years of experience in Product Management, Security Engineering, Security Architecture, or Technical Program Management.
• Must reside in one of the following US states: Alabama, California, Colorado, Georgia, Iowa, Maryland, Michigan, Minnesota, Mississippi, Missouri, New Jersey, New York, North Carolina, Oregon, Pennsylvania, South Carolina, Texas, Utah, Virginia, or Washington.
• Deep technical expertise in platform security, CI/CD systems, secure software supply chains, and AI/ML development environments.
• Strong knowledge of security architecture, threat modeling, vulnerability management, and security assurance principles.
• Familiarity with regulatory frameworks such as EU CRA, Cybersecurity EO, NIST, FedRAMP, and FIPS.
• Expertise in Windows security fundamentals, including Active Directory, Group Policy, and authentication/authorization concepts.

Nice to have

• Experience with operating systems, developer platforms, or large-scale engineering infrastructure.
• Knowledge of secure software supply chain, code-signing, and build systems.
• Familiarity with AI/ML security, model development environments, and AI governance.

Culture & Benefits

• Comprehensive health insurance and flexible spending account (FSA).
• Life and disability insurance.
• Paid time off (PTO).
• Retirement plan investing.
• Inclusive and equitable work environment as a Minority/Women-owned Business Enterprise (WMBE).