Remote opportunity at
ElasticPrincipal Product Manager (XDR & Exposure Management) - Security Solutions
This Principal Product Manager post at Elastic Security concentrates on the exposure and vulnerability half of the XDR picture. The job is full-time and remote, based…
Career Tools
About This Role
This Principal Product Manager post at Elastic Security concentrates on the exposure and vulnerability half of the XDR picture. The job is full-time and remote, based in the United States, and the pay band is quoted in euros. The product manager is responsible for XDR strategy and execution spanning endpoint, cloud, identity and network detection, and leads Elastic's push into exposure and vulnerability management. That expansion covers patching, device control,…
Job Description
This Principal Product Manager post at Elastic Security concentrates on the exposure and vulnerability half of the XDR picture. The job is full-time and remote, based in the United States, and the pay band is quoted in euros.
The product manager is responsible for XDR strategy and execution spanning endpoint, cloud, identity and network detection, and leads Elastic's push into exposure and vulnerability management. That expansion covers patching, device control, host firewall administration and remediation workflows, and includes managing noise so the tools are actually put to use.
Setting clear boundaries is a major task. Attack surface and cloud posture act as inputs that improve prioritization rather than products of their own. The product manager also works alongside the Entity Analytics team on asset criticality and entity context, because exposure ranking depends on those inputs.
Candidates need to tell apart raw scanning, asset inventory and genuine exposure ranking, and to see why reachability and exploitability are stronger signals than CVSS severity. Running a scanner is not required, but a candidate should know what makes prioritization trustworthy enough for teams to act on.
The role calls for 7 to 10 years of product management, with at least four years in security or enterprise B2B software, and a history of carrying products from strategy to launch and iteration. Knowledge of AI security is a plus. The typical starting base range is EUR 73,300 to 115,900, with no variable pay.
Responsibilities
- Run XDR strategy and delivery across four detection domains
- Lead Elastic's push into exposure and vulnerability management
- Shape patch management, device control, host firewall administration and remediation workflows
- Keep noise under control so new capabilities get used
- Define how XDR relates to exposure, attack surface and cloud posture
- Coordinate with the Entity Analytics group on asset criticality and entity context
Requirements
- 7 to 10 years in product management, at least four in security or enterprise software sold to businesses
- Hands-on understanding of XDR, EDR, SIEM or wider SecOps practice
- Clear sense of how scanning, asset lists and real exposure ranking differ
- Solid grasp of analytics and threat context, without a need to model by hand
- Credibility with engineers built on the quality of written requirements
Qualifications
- Practitioner experience in SOC work, detection engineering or incident response
- Familiarity with AI security and with the attack and defense of AI, ML and agent systems
Core Skills
Benefits
- Pay set by the work performed rather than by prior salary
- Health coverage that reaches families in many regions
- Schedule and location flexibility across numerous roles
- Generous yearly vacation allowance
- Matching of donations and volunteer effort up to $2,000 (or local equivalent)
- Volunteer time of up to 40 hours a year for causes the employee chooses
- Parental leave of at least 16 weeks
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Where is the job based?
The listing names the United States and describes the role as remote.
What is the pay band?
A typical starting base of EUR 73,300 to 115,900. Nothing variable is included.
Which exposure features are named?
Patching, device control, host firewall administration and remediation workflows.
How much experience is expected?
Seven to ten years in product management, including four years in security or enterprise B2B software.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.