Назад
Company hidden
обновлено 11 дней назад

Senior Product Manager (Secret Detection and Vulnerability Research)

Формат работы
remote (только USA)
Тип работы
fulltime
Грейд
senior
Английский
b2
Страна
US
Вакансия из списка Hirify.GlobalВакансия из Hirify Global, списка международных tech-компаний
Для мэтча и отклика нужен Plus

Мэтч & Сопровод

Для мэтча с этой вакансией нужен Plus

Описание вакансии

Текст:
/
TL;DR
Senior Product Manager (Secret Detection and Vulnerability Research) (Cybersecurity): Owning GitLab's secret detection offering and vulnerability research function with an accent on secret lifecycle management, detection content quality, and commercial outcomes. Focus on designing prevention and detection strategies, improving precision and recall, integrating AI into triage and remediation, and turning threat research into shipped security products.

Location: Remote, United States

Company

hirify.global is an intelligent orchestration platform for DevSecOps, helping organizations improve developer productivity, operational efficiency, security, compliance, and digital transformation.

What you will do

  • Own business outcomes for Secret Detection and Vulnerability Research, including adoption, expansion, competitive win rate, revenue contribution, packaging, and pricing.
  • Set the strategy for the full secret lifecycle across hirify.global.com, Dedicated, and Self-Managed, including prevention, detection, validation, revocation, and reporting.
  • Define how detection rules, advisories, and intelligence feeds are sourced, validated, versioned, measured, and presented to customers.
  • Own detection quality metrics, including precision and false-positive reduction, and work directly with scanner logic, entropy heuristics, data pipelines, and CI integration.
  • Use AI for research, analysis, prototyping, triage, rule generation, remediation guidance, and reducing human review effort.
  • Partner asynchronously with engineering, security research, threat intelligence, Field, Security, design, and research counterparts across multiple regions.

Requirements

  • Domain depth in application security, vulnerability management, or security research, including experience with scanners, detection content, threat intelligence, or SDLC security tooling.
  • Technical credibility to reason about detection logic, data pipelines, CI integration, and coverage-versus-noise tradeoffs.
  • Commercial reasoning based on revenue mechanics, buyer motion, and competitive displacement.
  • Evidence of using AI as a force multiplier for research, analysis, data pulls, prototyping, or drafting.
  • Judgment under ambiguity, with the ability to provide structured options and recommendations.
  • Ability to turn noisy, technical, and politically contested problems into clear written alignment for distributed teams.

Nice to have

  • Hands-on background as a developer, security engineer, red teamer, or researcher.
  • Experience with credential and token ecosystems.
  • Experience commercializing a data or intelligence asset.

Culture & Benefits

  • Remote work with asynchronous collaboration across multiple regions.
  • Flexible paid time off.
  • Benefits supporting health, finances, and well-being.
  • Equity compensation and an employee stock purchase plan.
  • Growth and development fund, parental leave, and team member resource groups.

Будьте осторожны

Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →