Product Manager, Endpoint Security & AI

About the Company

Our client is an early-stage cybersecurity startup building foundational endpoint security technology for Windows, Linux, and macOS.Their work lives deep in the operating system: processes, memory, kernel boundaries, and attacker tradeoffs. We focus on real threats, real exploits, and defensive systems that must hold up against skilled adversaries — not academic exercises.

About the Role

We're looking for a Product Manager who has worked on the other side of the console. You've hunted threats, reversed malware or triaged alerts on a night shift. You know what a protection engine has to stop and what an analyst needs to see.
You will own multiple security features and the console experience around them. You will take attack techniques and methods from research through requirements and feature development, including the logic behind them, and keep R&D, security research and detection teams aligned along the way.
This is a hands-on role, close to the technology and the customers, not just roadmaps and ceremonies.

What You'll Do

• Own multiple security features end to end, from research input to GA. This includes AI security features such as AI usage control and prompt protection
• Own attack techniques and methods from research to shipped feature: drive the research, define the requirements and guide development, including the prevention and detection logic (MITRE ATT&CK, EDR evasion, shellcode injection, hook bypass, ransomware behavior)
• Keep R&D, security research and detection teams aligned on what each feature must stop, how the logic works and what ships when
• Take part in threat modeling and security design reviews for your product area
• Write short epics and user stories that engineers can build from, and work daily with the research, agent, backend and UX teams to ship them
• Define how preventions and detections appear in the console: risks, incidents, attack stories, and the analyst's path from alert to response
• Shape AI features inside the product, such as AI-assisted investigation and query drafting, with clear guardrails on accuracy and data handling
• Support customer and MSSP POCs, pen tests and third-party evaluations, and turn what they find into prioritized work
• Work with international teams, partners and customers across time zones
• Track false positives, false negatives, performance impact and stability, and use them to set priorities
• Work with product marketing on positioning, release notes, competitive comparisons and technical enablement
• Follow the threat landscape and competing EDR, EPP and XDR vendors, and bring that view into roadmap decisions

Requirements

• 5+ years in cybersecurity, including at least 2 years hands-on in security research, malware analysis, threat hunting, incident response or a SOC
• 2+ years as a Product Manager, or in a product-facing technical role at a security vendor (solutions architect, technical PM, research lead)
• Strongly technical, with expert knowledge of endpoint security and the wider set of security needs around it, beyond EPP and EDR: identity, data loss and exfiltration, browser and web, device and application control, vulnerability exposure and AI usage
• Deep knowledge of Windows endpoint internals: processes, memory, drivers, kernel callbacks, user-mode hooks, and how modern attacks evade endpoint protection
• A working understanding of how AI and LLMs are used and abused in the enterprise: shadow AI, data leaking through prompts, prompt injection and AI-assisted attacks
• AI native: deep understanding and daily use of AI tools (assistants, agents, coding and prototyping tools) to bring your vision into reality with quality, performance and speed
• You can read telemetry and logs, write queries (SQL or KQL) and judge whether a detection is any good
• Clear, short writing. You can explain a technical decision to an engineer, a CISO and a salesperson
• You're comfortable making decisions with incomplete information in a fast-moving company
• Fluent written and spoken English

Nice to Have

• Hands-on product or research work in identity security (authentication, authorization, remote access) or browser security macOS or Linux endpoint security experience
• Hands-on experience writing or reviewing Sigma or YARA rules
• Hands-on work with ML or LLM-based detection, or building AI features into a product MSSP or MDR experience
• Familiarity with third-party AV testing, vendor certification programs and compliance frameworks such as SOC 2 and ISO 27001
• Reverse engineering tools (IDA, Ghidra, x64dbg) and Python scripting
• Experience with multi-tenant SaaS consoles

What Success Looks Like After 6 Months

• You own your security features end to end and have shipped at least one release
• Engineering trusts your specs: fewer back-and-forth questions and clear acceptance criteria
• You've supported customer POCs and turned what they found into roadmap items
• You have a clear picture of how competitors cover your area and can defend our positioning

Why Join Us

• Real ownership of a product that is still taking shape
• Working with researchers and engineers who build protection at the OS level
• Direct contact with customers, partners and real attacks
• High autonomy, strong technical peers and little bureaucracy