Remote opportunity at
ElasticPrincipal Product Manager - Identity Threat Detection & Response
This full-time Principal Product Manager role at Elastic Security centers on identity threat detection and response, known as ITDR. The position is remote and listed for…
Career Tools
About This Role
This full-time Principal Product Manager role at Elastic Security centers on identity threat detection and response, known as ITDR. The position is remote and listed for the United States, and the pay band is quoted in Canadian dollars. Identity is now a prime target because attackers frequently sign in instead of breaking in. These intrusions can happen on premises, in cloud environments or through autonomous agents. The product manager sets…
Job Description
This full-time Principal Product Manager role at Elastic Security centers on identity threat detection and response, known as ITDR. The position is remote and listed for the United States, and the pay band is quoted in Canadian dollars.
Identity is now a prime target because attackers frequently sign in instead of breaking in. These intrusions can happen on premises, in cloud environments or through autonomous agents. The product manager sets Elastic's approach to spotting, examining and countering identity-based threats, starting from the Entity Analytics and Entity Store base and extending it into a complete identity-defense function.
The role also owns the roadmap for identities that are not human, including AI agents, inside Elastic Security. That means modeling service accounts, workloads, stored secrets and self-directed agents, each an identity with its own behavior standards, owners and lifecycles, and building methods to spot identities that run constantly and at machine scale.
On the detection side, the job partners with threat researchers and detection engineers on credential access, privilege escalation, lateral movement through identity systems, and misuse of identity providers and tokens. On the response side, detections should lead to containment through identity-system integrations and automation, with human review for significant steps.
The product manager also works with the design team on investigation experiences that put identity at the heart of the analyst workflow, gathers requirements with enterprise customers and solution architects, and tracks the identity security market. Public education through blog posts, talks and community participation is part of the role.
Applicants should bring more than 10 years of product or solution experience with security products, along with knowledge of identity attack techniques spanning directory services, cloud IdPs, single sign-on, OAuth and privileged-access controls. Familiarity with UEBA and with AI and ML systems, including LLMs and agents, is required. The typical starting base range is CAD 154,000 to 243,600, and the role is eligible for the stock program.
Responsibilities
- Chart the direction, strategy and multi-stage plan for a trustworthy ITDR function
- Oversee governance of AI agent and non-human identities, including ownership and lifecycle
- Partner with threat research on identity-specific attack patterns
- Shape containment and automated response with human oversight
- Feed identity signals into SIEM and XDR alongside endpoint, cloud and network data
- Design identity-focused investigation experiences with the design team
- Represent Elastic's identity features through articles, talks and community engagement
Requirements
- More than 10 years in product or solution roles for security products
- History of carrying data-intensive products from first release through iterative growth
- Knowledge of identity attack methods in on-premises and cloud settings
- Understanding of UEBA and of non-human identities such as service accounts and AI agents
- Working knowledge of AI and ML systems, including behavioral analytics and LLMs
- Skill at leading across a matrixed organization with principal-level autonomy
Qualifications
- Dedication to solving real-world problems for security analysts and detection engineers
Core Skills
Benefits
- Pay set by the work performed rather than by prior salary
- Health coverage that reaches families in many regions
- Schedule and location flexibility across numerous roles
- Generous yearly vacation allowance
- Matching of donations and volunteer effort up to $2,000 (or local equivalent)
- Volunteer time of up to 40 hours a year for causes the employee chooses
- Parental leave of at least 16 weeks
- Participation in the stock program
- Employer-matched RRSP, dollar for dollar up to six percent of eligible earnings
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the job located?
The listing gives the location as the United States and describes the role as remote.
What is the salary range?
The typical starting base salary range is CAD 154,000 to 243,600, with no variable pay. The role is eligible for the stock program, and an RRSP match of up to six percent is listed.
What does the role cover?
It covers ITDR strategy, containment and response, governance of identities that are not human, including AI agents, and integration of identity signals into SIEM and XDR.
How many years of experience are needed?
More than 10 years in product or solution roles for security products.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.