Remote opportunity at
ElasticPrincipal Product Manager (XDR & Exposure Management) - Security Solutions
This full-time, remote Principal Product Manager job at Elastic Security is based in the United States. It covers XDR together with the exposure and vulnerability capabilities…
Career Tools
About This Role
This full-time, remote Principal Product Manager job at Elastic Security is based in the United States. It covers XDR together with the exposure and vulnerability capabilities merging into the platform. The opening argues that a dependable detection and response product begins with an accurate picture of attacker behavior and of where defenders run out of time. Today the SOC handles reactive detection and proactive exposure work at once, so the…
Job Description
This full-time, remote Principal Product Manager job at Elastic Security is based in the United States. It covers XDR together with the exposure and vulnerability capabilities merging into the platform.
The opening argues that a dependable detection and response product begins with an accurate picture of attacker behavior and of where defenders run out of time. Today the SOC handles reactive detection and proactive exposure work at once, so the product manager must plan one coherent approach to both.
Responsibilities include guiding XDR from alert correlation and incident grouping through response actions and closed-loop automation. The role also leads the move into patching, device control, firewall management on hosts and remediation workflows. It separates XDR from neighboring areas like attack surface work and cloud posture, which feed the product as signals rather than separate offerings.
Practitioner experience is a solid advantage. People who previously worked as SOC analysts, detection engineers or incident responders bring a kind of credibility that the listing says is difficult to teach. Familiarity with the analytics and data science behind detection is expected, as is an informed view of the threat landscape.
The baseline requirement is 7 to 10 years in product management, with at least four years in security or enterprise B2B software. The typical starting base salary is EUR 80,400 to 127,200, with no variable compensation component.
Responsibilities
- Own XDR from alert correlation and incident building to response actions
- Lead automation that keeps analysts in the decision loop
- Drive exposure expansion including patch management, device control and host firewall management
- Set boundaries between XDR, exposure, attack surface and cloud posture
- Anchor detection and exposure scoring in threat research
Requirements
- 7 to 10 years of product management with four years in security or business software sold to enterprises
- Working familiarity with XDR, EDR, SIEM or wider security work
- Understanding of the analytics that power detection and prioritization
- Track record of taking products from strategy to iterated results
Qualifications
- Practitioner history in SOC operations, detection engineering or incident response
- Familiarity with AI security and with how AI systems are attacked and defended
Core Skills
Benefits
- Pay set by the work performed rather than by prior salary
- Health coverage that reaches families in many regions
- Schedule and location flexibility across numerous roles
- Generous yearly vacation allowance
- Matching of donations and volunteer effort up to $2,000 (or local equivalent)
- Volunteer time of up to 40 hours a year for causes the employee chooses
- Parental leave of at least 16 weeks
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is this position remote?
Yes. The listing is marked remote and the location is the United States.
Does a SOC background matter?
A hands-on background in SOC work, detection engineering or incident response is described as a solid advantage rather than a strict requirement.
What is the salary range?
The typical starting base salary range is EUR 80,400 to 127,200. There is no variable compensation component.
What experience is required?
Between 7 and 10 years in product roles, including four years in security or enterprise B2B software.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.