Principal Product Manager, Security

New

Location: Remote (United States | Canada)Full-TimePrincipal

SalaryUSA-based roles only: The annual base salary for this role is between $238,000 USD and $357,000 USD; 15% annual bonus. Canada-based roles only: The annual base salary for this role is between $208,000 CAD and $312,000 CAD; 15% annual bonus.

Apply NowOpens the employer's application page

More jobs in this role

Job Details

Experience: 10+ years of product management experience
Required Skills: Product Management

Requirements

Have 10+ years of product management experience, including significant time on security-critical products or platforms in a SaaS environment; equivalent depth as a security engineer or researcher who moved into product will also be considered.
Demonstrate deep knowledge of cryptography, authentication protocols, identity and access management, zero-knowledge and end-to-end encrypted system design, and threat modeling.
Be fluent in the credential and identity landscape, including passkeys, WebAuthn/FIDO, and sign-in standards.
Have a track record of earning credibility with security engineering teams.
Be able to read and reason through technical specifications, security audits, and cryptographic design documents.
Have experience making and defending risk-based tradeoffs and explaining them to engineers, executives, and customers.
Have shipped security features and used friction and adoption data to improve them.
Have experience setting platform- or infrastructure-level strategy and influencing roadmaps without formal authority.
Communicate technical security topics clearly to both security researchers and executives.
Be willing and able to travel for in-person engagement, including offsites, team meetings, and customer or industry events.

Responsibilities

Partner with product managers and feature teams to identify security requirements and threat-model implications before designs are locked.
Translate feature-team needs into prioritized security work and make Security Engineering priorities clear across the company.
Set direction for platform-level security investments, including key management and recovery, zero-knowledge cryptographic foundations, authentication, and post-quantum cryptography readiness.
Define approaches to agentic credential access, secrets for non-human identities and AI agents, and emerging trust models around tools and protocols like MCP.
Use adoption, support, and telemetry data alongside threat models to assess risk and usability tradeoffs.
Engage with security researchers and the bug bounty program, speak at conferences, and contribute to discussion about credential security.
Coach PMs on security thinking, challenge assumptions, and set standards for security-critical product work.

View Full Description & ApplyYou'll be redirected to the employer's site