Remote opportunity at
ElasticPrincipal Product Manager - Identity Threat Detection & Response
The role is a principal product management position centered on identity threat detection and response, inside Elastic Security. It is full-time and remote, with the location…
Career Tools
About This Role
The role is a principal product management position centered on identity threat detection and response, inside Elastic Security. It is full-time and remote, with the location listed as the United States. The job is to define how the platform detects, investigates and responds to threats against identities, building on the entity analytics and entity store work the company already has. The posting gives notable weight to non-human identities. The owner…
Job Description
The role is a principal product management position centered on identity threat detection and response, inside Elastic Security. It is full-time and remote, with the location listed as the United States. The job is to define how the platform detects, investigates and responds to threats against identities, building on the entity analytics and entity store work the company already has.
The posting gives notable weight to non-human identities. The owner would map out how machine accounts, workloads, credentials and autonomous AI agents are treated as important identities, each with its own expectations for behavior, ownership and lifecycle. Detecting identities that run continuously at machine scale is also part of the brief.
On the threat side, the work covers credential access, privilege escalation, identity-based lateral movement, and misuse of identity providers and tokens. The product owner works alongside threat research and detection engineering to keep these threats tied to real adversary behavior. Containment is a core deliverable, using integrations with identity systems and automated responses that still include human oversight for significant actions.
The person also works with enterprise customers, SOC teams, sales staff, solution architects, and designers on analyst-facing experiences. Identity data is meant to be combined with endpoint, cloud and network information across SIEM and XDR. Public education is part of the role too, through articles, talks and community interaction. Elastic is presented as a search AI company whose platform serves more than half of the Fortune 500.
Responsibilities
- Define and own the vision and roadmap for an identity threat detection and response function
- Plan how non-human identities and AI agents are modeled, owned and governed in the product
- Work with threat researchers and detection engineers on adversary behavior tied to identities
- Lead the response and containment strategy, combining integrations and automation with human oversight
- Work with enterprise customers and internal teams to understand identity-attack requirements and priorities
- Collaborate with design on investigation and response workflows that put identity first
- Fold identity telemetry into SIEM and XDR together with endpoint, cloud and network inputs
- Serve as the product expert and share the identity capability publicly
Requirements
- Ten-plus years in product or solution delivery for security tooling, such as SIEM, XDR, EDR and identity platforms, or in detection and response
- Steady record of delivering data-heavy products from first concept through launch and growth
- Solid grasp of identity attack methods and the wider identity stack: Active Directory, SSO and OAuth, cloud identity providers and privileged access
- Grounding in ITDR practice and entity behavioral analytics (UEBA)
- Fluency in non-human identities such as machine accounts, workloads, credentials and AI agents
- Technical comprehension of AI and ML methods such as outlier detection, large language models and agent-based systems
- Demonstrated leadership across a matrixed organization in a remote-first setting
- Excellent communication for both technical and executive audiences
Core Skills
Benefits
- Pay set by the scope of the work rather than past salary
- Medical coverage for staff and their families in many regions
- Choice of location and working hours for many positions
- Generous annual vacation allowance
- Matching for charitable giving and service of up to $2,000 in local currency equivalent, plus up to 40 hours a year for volunteer projects
- Parental leave of at least 16 weeks
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this a remote position?
Yes. The posting lists the work arrangement as remote and the location as United States.
What is the salary range?
The posting gives a typical starting base salary range of 116,200 to 153,100 EUR. The role has no variable compensation component.
What are the main requirements?
The posting asks for ten or more years in security product management or solution delivery, plus knowledge of identity security, UEBA and non-human identities.
What is the employment type?
The role is full-time.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.