Product Manager, Cybersecurity Software (Offensive-Informed, Commercial Focus)

Leidos•Columbia, MD

7d•Hybrid

About The Position

Leidos is seeking a Product Manager to lead the transition of advanced cyber capabilities into scalable, commercially viable defensive cybersecurity products. This role sits within the Cyber Network Operations (CNO) Internal Research and Development (IRAD) portfolio and focuses on translating offensive cyber expertise into next-generation defensive solutions aligned to the Application Security Testing (AST) market, including SAST, DAST, IAST, and RASP. The Product Manager will bridge technical innovation and market execution, shaping products that reflect real-world adversary behavior while addressing enterprise application security needs. This role requires familiarity with the AST product landscape, including competitive offerings, buyer personas, and evolving trends in secure software development. Must be able to work in the office 1 - 2 days per week.

Requirements

Bachelor’s degree and 8+ years experience in Computer Science, Engineering, Business, or a related field (Master’s preferred). Additional years experience may be used in lieu of a degree.
8+ years of relevant experience (or 6+ years with a Master’s degree)
3+ years of experience in product management, technical program management, or similar roles in cybersecurity or software products
Demonstrated experience bringing products from concept through delivery and adoption
Working knowledge of offensive cyber operations and application-layer vulnerabilities (e.g., OWASP Top 10)
Familiarity with Application Security Testing methodologies and tools, including SAST, DAST, IAST, and RASP
Understanding of the AST competitive landscape and key vendors in the market
Experience collaborating with cross-functional teams to deliver complex technical solutions
Strong analytical skills, including defining and tracking product KPIs and success metrics
Effective communication and stakeholder engagement skills
US citizen with the ability to obtain a security clearance

Nice To Haves

Experience developing or managing AST or DevSecOps-integrated security products
Familiarity with CI/CD pipelines and secure software development lifecycle (SSDLC) practices
Experience building or managing partner ecosystems, including integrations with developer tools and security platforms
Knowledge of modern application architectures (e.g., microservices, containers, cloud-native environments)
Experience with AI/ML-enabled cybersecurity solutions
Background in national security, defense, or cyber operations environments
Active TS/SCI with Polygraph security clearance

Responsibilities

Define and execute product vision, strategy, and roadmap for cybersecurity solutions aligned to the AST market (SAST, DAST, IAST, RASP)
Translate offensive cyber insights (e.g., adversary tactics, exploitation paths, application-layer vulnerabilities) into differentiated application security product capabilities
Analyze AST market trends, customer needs, and competitive positioning to inform product direction and prioritization
Lead the transition of prototypes and research outputs into production-ready, scalable software products
Engage with internal stakeholders, customers, and external partners to validate use cases and refine product-market fit
Develop and manage product metrics (adoption, retention, integration depth, revenue impact, time-to-market)
Establish and expand commercial partnerships, including integrations with DevSecOps toolchains and channel partners
Support go-to-market strategy, including product positioning, competitive differentiation, and customer demonstrations
Deliver product briefings, status updates, and impact reports to technical and business leadership