Senior Product Manager, Product Security

Litmus•Santa Clara, CA

15h

About The Position

Litmus is seeking a hands-on Senior Product Manager, Product Security to drive product security across Litmus Edge, Litmus Edge Manager, Litmus UNS, and related platform services. This role combines product management, software engineering, cybersecurity, and AI expertise. The position owns the product security roadmap, proactively identifies vulnerabilities, collaborates with Engineering on remediation, and researches secure, scalable architectures for current and future products. The successful candidate will translate security challenges into product improvements while participating in technical investigations, prototyping, and security research. They will work across engineering, DevOps, QA, IT, leadership, and enterprise customers to integrate security into product development and releases, strengthen security practices, address customer requirements, and improve Litmus product architecture.

Requirements

At least 7 years of experience in software engineering, product security, cybersecurity, security architecture, or technical product management.
Strong hands-on software engineering experience, including the ability to investigate vulnerabilities, review code, and validate technical solutions.
Experience defining technical product roadmaps and driving security initiatives with Engineering teams.
Strong understanding of Linux, Docker, Kubernetes, networking, and cloud infrastructure.
Practical knowledge of vulnerability assessment, penetration testing methodologies, threat modeling, and secure software development.
Experience with application and API security, authentication, authorization, encryption, TLS, and certificate management.
Familiarity with CVE/CVSS, open-source dependency security, and vulnerability management.
Experience with AI-assisted development or security tools, scripting, and automation.
Ability to independently research technologies, build prototypes, and collaborate on engineering implementations.
Strong communication skills for engaging technical teams, leadership, and enterprise customers.

Nice To Haves

Experience with industrial IoT, edge computing, OT security, or enterprise infrastructure software.
Knowledge of industrial protocols such as OPC UA and MQTT.
Experience with embedded Linux, firmware security, secure boot, and OTA updates.
Familiarity with zero-trust architecture, container hardening, virtualization, sandboxing, and microVM technologies.
Experience securing AI applications, autonomous agents, or edge AI workloads.
Knowledge of SBOM, SAST, DAST, CI/CD security, and software supply chain protection.
Familiarity with IEC 62443, NIST, ISO 27001, SOC 2, or the EU Cyber Resilience Act.
Experience supporting enterprise customer security reviews and technical assessments.

Responsibilities

Own and drive the product security roadmap across the Litmus product portfolio.
Proactively identify security vulnerabilities, architectural weaknesses, and emerging threats.
Track relevant CVEs, security advisories, and open-source dependencies; prioritize remediation based on risk and product impact.
Conduct hands-on vulnerability assessments, security investigations, and architecture reviews across applications, APIs, Linux systems, containers, and infrastructure.
Reproduce vulnerabilities, investigate root causes, and validate fixes with Engineering.
Review source code, configurations, and deployment architectures to identify security risks.
Build scripts, proof-of-concepts, and automated tests to evaluate and validate security solutions.
Work with Engineering to plan security improvements, prioritize releases, and balance immediate fixes with long-term investments.
Research and evaluate emerging security technologies and architectures for industrial edge and enterprise environments.
Design and validate secure, scalable deployment models across edge devices, virtual machines, containers, Kubernetes, and cloud infrastructure.
Explore zero-trust principles, workload isolation, sandboxing, authentication, authorization, and secure communication.
Evaluate security implications of AI-powered applications, autonomous agents, and edge AI workloads.
Apply AI-assisted tools to vulnerability discovery, code analysis, security testing, and automation.
Prototype security approaches and translate research into product capabilities and roadmap initiatives.
Anticipate future enterprise security requirements and proactively improve product architecture.
Partner with Engineering, DevOps, and QA to integrate security into product design, development, testing, and releases.
Drive secure development practices, automated security testing, dependency management, and software supply chain security.
Define security requirements for APIs, OAuth, RBAC, device management, remote access, and software updates.
Coordinate product security incident response, vulnerability remediation, and security-related releases.
Establish security review processes, technical guidelines, and measurable security objectives.
Coordinate third-party penetration testing, security assessments, and product security audits, and drive remediation of findings.
Support compliance and certification initiatives, including ISO 27001, SOC 2, IEC 62443, and the EU Cyber Resilience Act, as applicable.
Collaborate with IT, DevOps, and leadership on security governance, access controls, and employee security awareness.
Participate in enterprise customer security discussions, technical assessments, and security reviews.
Translate customer security requirements into product features and roadmap priorities.
Develop product security incident response procedures, vulnerability disclosure processes, and customer security communications.