Senior Product Manager, Product Security

Litmus • Santa Clara, CA

2d

About The Position

Litmus is seeking a hands-on Senior Product Manager, Product Security to drive product security across Litmus Edge, Litmus Edge Manager, Litmus UNS, and related platform services. The role combines product management, software engineering, cybersecurity, and AI expertise. The person in this role will own the product security roadmap, identify vulnerabilities, collaborate with Engineering on remediation, and research secure, scalable architectures for current and future products.

This technical product leader will translate security challenges into product improvements while participating in technical investigations, prototyping, and security research. The role also partners with Engineering, DevOps, QA, IT, leadership, and enterprise customers to integrate security into product development, respond to vulnerabilities, support security assessments and compliance initiatives, and turn customer security needs into product capabilities.

Requirements

• 7+ years of experience in software engineering, product security, cybersecurity, security architecture, or technical product management.
• Strong hands-on software engineering experience, including the ability to investigate vulnerabilities, review code, and validate technical solutions.
• Experience defining technical product roadmaps and driving security initiatives with Engineering teams.
• Strong understanding of Linux, Docker, Kubernetes, networking, and cloud infrastructure.
• Practical knowledge of vulnerability assessment, penetration testing methodologies, threat modeling, and secure software development.
• Experience with application and API security, authentication, authorization, encryption, TLS, and certificate management.
• Familiarity with CVE/CVSS, open-source dependency security, and vulnerability management.
• Experience with AI-assisted development or security tools, scripting, and automation.
• Ability to independently research technologies, build prototypes, and collaborate on engineering implementations.
• Strong communication skills for engaging technical teams, leadership, and enterprise customers.

Nice To Haves

• Experience with industrial IoT, edge computing, OT security, or enterprise infrastructure software.
• Knowledge of industrial protocols such as OPC UA and MQTT.
• Experience with embedded Linux, firmware security, secure boot, and OTA updates.
• Familiarity with zero-trust architecture, container hardening, virtualization, sandboxing, and microVM technologies.
• Experience securing AI applications, autonomous agents, or edge AI workloads.
• Knowledge of SBOM, SAST, DAST, CI/CD security, and software supply chain protection.
• Familiarity with IEC 62443, NIST, ISO 27001, SOC 2, or the EU Cyber Resilience Act.
• Experience supporting enterprise customer security reviews and technical assessments.

Responsibilities

• Own and drive the product security roadmap across the Litmus product portfolio.
• Proactively identify security vulnerabilities, architectural weaknesses, and emerging threats.
• Track relevant CVEs, security advisories, and open-source dependencies; prioritize remediation based on risk and product impact.
• Conduct hands-on vulnerability assessments, security investigations, and architecture reviews across applications, APIs, Linux systems, containers, and infrastructure.
• Reproduce vulnerabilities, investigate root causes, and validate fixes with Engineering.
• Review source code, configurations, and deployment architectures to identify security risks.
• Build scripts, proof-of-concepts, and automated tests to evaluate and validate security solutions.
• Work with Engineering to plan security improvements, prioritize releases, and balance immediate fixes with long-term investments.
• Research and evaluate emerging security technologies and architectures for industrial edge and enterprise environments.
• Design and validate secure, scalable deployment models across edge devices, virtual machines, containers, Kubernetes, and cloud infrastructure.
• Explore zero-trust principles, workload isolation, sandboxing, authentication, authorization, and secure communication.
• Evaluate security implications of AI-powered applications, autonomous agents, and edge AI workloads.
• Apply AI-assisted tools to vulnerability discovery, code analysis, security testing, and automation.
• Prototype new security approaches and translate research into product capabilities and roadmap initiatives.
• Anticipate future enterprise security requirements and proactively improve product architecture.
• Partner with Engineering, DevOps, and QA to integrate security into product design, development, testing, and releases.
• Drive secure development practices, automated security testing, dependency management, and software supply chain security.
• Define security requirements for APIs, OAuth, RBAC, device management, remote access, and software updates.
• Coordinate product security incident response, vulnerability remediation, and security-related releases.
• Establish security review processes, technical guidelines, and measurable security objectives.
• Coordinate third-party penetration testing, security assessments, and product security audits, and drive remediation of findings.
• Support compliance and certification initiatives, including ISO 27001, SOC 2, IEC 62443, and the EU Cyber Resilience Act, as applicable.
• Collaborate with IT, DevOps, and leadership on security governance, access controls, and employee security awareness.
• Participate in enterprise customer security discussions, technical assessments, and security reviews.
• Translate customer security requirements into product features and roadmap priorities.
• Develop product security incident response procedures, vulnerability disclosure processes, and customer security communications.

What This Job Offers

• Job Type: Full-time
• Career Level: Senior
• Education Level: No Education Listed