Remote opportunity at
ElasticPrincipal Product Manager - Identity Threat Detection & Response
This is a full-time, remote principal product position based in the United States, focused on identity threat detection and response for Elastic Security. The product leader…
Career Tools
About This Role
This is a full-time, remote principal product position based in the United States, focused on identity threat detection and response for Elastic Security. The product leader would define the strategy and roadmap for detecting, investigating and containing identity-based attacks, using the company's entity analytics and entity store work as the starting point. The posting also assigns ownership of the roadmap for non-human identities. Machine accounts, workloads, credentials and self-directed AI…
Job Description
This is a full-time, remote principal product position based in the United States, focused on identity threat detection and response for Elastic Security. The product leader would define the strategy and roadmap for detecting, investigating and containing identity-based attacks, using the company's entity analytics and entity store work as the starting point.
The posting also assigns ownership of the roadmap for non-human identities. Machine accounts, workloads, credentials and self-directed AI agents are all in scope, along with their behavior standards, owners and lifecycle, plus methods for spotting identities that operate nonstop at machine scale.
Collaboration is central. The role works with threat researchers and detection engineers on credential access, privilege escalation, lateral movement and misuse of identity providers and tokens. It also drives response and containment through integrations with identity systems and automation that keeps human oversight over important actions. Investigation and response designs are developed with the design team, and identity data is folded into SIEM and XDR together with endpoint, cloud and network inputs.
Enterprise customers and security operations teams supply much of the input, and the holder is expected to understand their identity-attack requirements and clarify product needs. The job also includes building market knowledge and sharing it externally through articles, conference talks and open community work. The employer describes itself as a search AI company used by more than half of the Fortune 500.
Responsibilities
- Own the plan and milestones for a credible identity threat detection and response capability
- Plan governance for machine accounts, workloads, credentials and AI agents as identities in their own right
- Work alongside threat researchers and detection engineers on identity-focused adversary tactics
- Drive response and containment, pairing automation with human approval for significant actions
- Engage enterprise customers and security operations teams to understand identity-attack needs
- Direct investigation and response experiences that put identity at the center of the analyst workflow
- Merge identity telemetry with endpoint, cloud and network inputs inside SIEM and XDR
- Build market knowledge and act as the product expert through public content and community work
Requirements
- Ten-plus years leading product or solution delivery on security tools such as SIEM, XDR, EDR and identity products, or in detection and response
- Proven record of leading complex, data-heavy products from first concept through launch and expansion
- Solid knowledge of how identity-based attacks work, across Active Directory, SSO and OAuth, cloud identity providers and privileged access
- Familiarity with ITDR and entity behavioral analytics (UEBA)
- Fluency with non-human identities, meaning machine accounts, workloads, credentials and AI agents
- Deep technical understanding of AI and ML, spanning behavior analytics, outlier detection, large language models and agent systems
- Ability to align multiple stakeholders across a matrixed, remote-first organization
- Strong communication skills for both technical and executive audiences
Core Skills
Benefits
- Eligible to take part in the company stock program alongside base pay
- RRSP contributions matched dollar for dollar up to 6% of eligible pay
- Pay set by the scope of the work rather than past salary
- Medical coverage for staff and their families in many regions
- Choice of location and working hours for many positions
- Generous annual vacation allowance
- Matching for charitable giving and service of up to $2,000 in local currency equivalent, plus up to 40 hours a year for volunteer projects
- Parental leave of at least 16 weeks
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is this role located?
The posting lists the location as United States. The work is described as remote.
What is the base salary range?
The typical starting base salary is 185,600 to 230,200 USD. In select locations, including Seattle, Los Angeles, the San Francisco Bay Area and New York City metro, an alternate range of 211,900 to 278,000 USD applies.
Is there variable pay?
The posting states there is no variable compensation component. The role is eligible for the company stock program.
What experience is required?
Ten or more years of product management or solution delivery experience on security products is required.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.