Remote opportunity at
ElasticPrincipal Product Manager - Identity Threat Detection & Response
Elastic Security is hiring a Principal Product Manager to shape identity threat detection and response, usually called ITDR. The job is full-time and remote, listed for…
Career Tools
About This Role
Elastic Security is hiring a Principal Product Manager to shape identity threat detection and response, usually called ITDR. The job is full-time and remote, listed for the United States. The role starts from the point that identity has become a prime target, because intruders increasingly sign in with valid credentials rather than forcing their way in. These attacks reach on-premises systems, cloud platforms and self-directed AI agents. The product manager…
Job Description
Elastic Security is hiring a Principal Product Manager to shape identity threat detection and response, usually called ITDR. The job is full-time and remote, listed for the United States.
The role starts from the point that identity has become a prime target, because intruders increasingly sign in with valid credentials rather than forcing their way in. These attacks reach on-premises systems, cloud platforms and self-directed AI agents. The product manager lays out Elastic's approach to spotting, examining and countering identity-based threats, building on the existing Entity Analytics and Entity Store groundwork.
The job also covers the roadmap for non-human identities and AI agent identities, which the posting calls one of the least-governed and fastest-expanding attack surfaces. That spans service accounts, workloads, stored secrets and autonomous agents, each with separate behavior standards, an owner and a lifecycle, plus detection methods for identities that act constantly and at machine speed.
Partnering with threat researchers and detection engineers, the product manager targets credential theft, privilege escalation, identity-based lateral movement, and misuse of identity providers and tokens. Response and containment should happen through identity-system integrations and automation, with human review for consequential actions. Identity signals also need to be combined with endpoint, cloud and network telemetry in SIEM and XDR.
Other tasks include designing investigation and response experiences with the design team, gathering requirements from enterprise customers, solution architects and security operations groups, and tracking the identity security market. The product manager also promotes Elastic's identity features through blog posts, talks and community engagement.
Candidates should have at least 10 years in product or solution roles for security tools, a history of launching data-heavy products, and familiarity with directory services, cloud IdPs, single sign-on, OAuth and privileged-access controls. Knowledge of UEBA and of AI and ML topics such as LLMs and agentic systems is needed. The typical starting base range is EUR 94,400 to 116,900, with no variable compensation.
Responsibilities
- Define the direction, strategy and multi-stage plan for a trustworthy ITDR capability
- Define how service accounts, workloads, stored secrets and AI agents are governed as identities
- Work with threat researchers on identity-centered attack patterns
- Build containment and automated response with human oversight of major actions
- Fold identity signals into SIEM and XDR alongside endpoint, cloud and network data
- Create identity-focused investigation experiences with designers
- Champion Elastic's identity features via articles, talks and community work
Requirements
- 10 or more years in product or solution roles for security products
- Track record of leading data-heavy products from first build through growth
- Command of identity attack methods spanning directory services, cloud IdPs, single sign-on, OAuth and privileged-access controls
- Fluency with non-human identities, including AI agents
- Grasp of AI and ML methods such as behavior-based analytics, outlier detection, LLMs and agents
- Skill at leading across a matrixed, remote-first organization with principal-level judgment
Qualifications
- Commitment to tackling real customer problems for analysts and detection engineers
Core Skills
Benefits
- Pay set by the work performed rather than by prior salary
- Health coverage that reaches families in many regions
- Schedule and location flexibility across numerous roles
- Generous yearly vacation allowance
- Matching of donations and volunteer effort up to $2,000 (or local equivalent)
- Volunteer time of up to 40 hours a year for causes the employee chooses
- Parental leave of at least 16 weeks
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is the role remote?
Yes. The listing describes a remote role with the location given as the United States.
What is the base pay?
The typical starting base salary range is EUR 94,400 to 116,900, with no variable compensation component.
What experience is required?
At least 10 years in product or solution roles for security products, plus fluency in identity security and AI and ML concepts.
Does the role cover non-human identities?
Yes. The roadmap covers service accounts, workloads, stored secrets and AI agent identities, each with its own behavior standards and lifecycle.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.