Director of Product Management – Application Security

Harness•Mountain View, CA

12h•Onsite

About The Position

Harness is seeking a Director of Product Management to lead key aspects of their Application Security (AppSec) platform. This role will focus on DevSecOps-integrated security, Application Security Testing (AST), Application Security Posture Management (ASPM), and AI-driven AppSec workflows. The position involves end-to-end business ownership of the Security Testing Orchestration (STO) module, including vision, strategy, and P&L. Additionally, the role requires managing SAST and SCA through a team of product managers. The Director will define how security is orchestrated, prioritized, and remediated across the Software Development Lifecycle (SDLC) for global enterprise customers. Harness is an AI Software Delivery Platform company with significant funding and backing from prominent investors, aiming to address the bottlenecks in the software delivery lifecycle beyond code creation, including testing, deployments, application security, reliability, compliance, and cost optimization.

Requirements

10–15 years of product management experience in security, DevSecOps, or developer platforms.
Experience owning product business outcomes, including strategy, positioning, and revenue impact.
Experience managing product managers and driving multi-product execution.
Strong understanding of AST (SAST, SCA, DAST).
Strong understanding of CI/CD and developer workflows.
Strong understanding of Vulnerability management / ASPM.
Familiarity with AI/LLM-driven workflows.
Strong communication and stakeholder management skills across product, engineering, and GTM teams.

Nice To Haves

Experience building AppSec or DevSecOps platforms at scale.
Familiarity with SBOMs, dependency graphs, and risk prioritization.
Exposure to AI governance or automated remediation.
Background in engineering, security, or DevOps.
Cloud-native experience.

Responsibilities

Own the vision, strategy, roadmap, and P&L for STO and aligned AppSec capabilities.
Own the strategy and roadmap for STO, SAST, SCA (primary ownership), ASPM and vulnerability correlation, CI/CD-native DevSecOps integrations, and AI-powered / agentic AppSec workflows.
Define end-to-end AppSec workflows across the SDLC.
Partner with engineering to deliver scalable platform capabilities.
Design AI-assisted experiences (prioritization, remediation, guardrails).
Manage and mentor product managers across SAST and SCA.
Work closely with GTM teams (sales, marketing, customer success) to drive product positioning, adoption, and revenue growth.
Engage directly with customers to shape a roadmap, improve adoption, and ensure business impact.
Drive competitive positioning and track product metrics (adoption, revenue, coverage, signal quality, MTTR, DX).