Remote opportunity at
ElasticPrincipal Product Manager (XDR & Exposure Management) - Security Solutions
Elastic Security is hiring a Principal Product Manager who will take charge of XDR and of the exposure and vulnerability functions merging into it. The role…
Career Tools
About This Role
Elastic Security is hiring a Principal Product Manager who will take charge of XDR and of the exposure and vulnerability functions merging into it. The role is full-time, remote, and listed for the United States. Ownership runs from the core detection and response engine out to the exposure work joining it. XDR is the anchor of the work. Its scope covers endpoint, cloud, identity and network signals, and it moves…
Job Description
Elastic Security is hiring a Principal Product Manager who will take charge of XDR and of the exposure and vulnerability functions merging into it. The role is full-time, remote, and listed for the United States.
Ownership runs from the core detection and response engine out to the exposure work joining it. XDR is the anchor of the work. Its scope covers endpoint, cloud, identity and network signals, and it moves from grouping alerts into incidents, through response actions, to automation that acts quickly while keeping an analyst in control.
Growth is concentrated in exposure and vulnerability management. Attack surface and cloud posture will not be built as standalone products; they supply signals that make prioritization sharper. Planned features named in the posting include patching, device control, firewall management on hosts and remediation workflows, along with work to cut down on noise so customers actually adopt them.
This position works at the junction of Product, Engineering and Elastic Security Labs research. It calls for someone who can hold credible conversations with CISOs and VPs of Security Operations, interpret the competitive market, and choose what to drop from the roadmap as well as what to add.
Applicants should have 7 to 10 years in product management, at least four of them in security or enterprise B2B software, plus practical familiarity with XDR, EDR or SIEM concepts. Experience in SOC operations, detection engineering or incident response is described as a notable advantage. The listing describes base pay with no variable component, but it does not specify a salary range.
Responsibilities
- Direct XDR strategy and delivery spanning endpoints, cloud workloads, identities and networks
- Shape alert-to-incident workflows, response actions and automation
- Lead the push into exposure management, including patching and remediation workflows
- Define the boundary between XDR and its attack surface and cloud posture inputs
- Turn threat research from Security Labs into requirements engineers can implement
- Write decision memos, competitive briefs and roadmap trackers for stakeholders
Requirements
- 7 to 10 years in product management, including at least four years in security or enterprise B2B software
- Practical grounding in XDR, EDR, SIEM or wider security practice
- Grasp of why reachability and exploitability outweigh CVSS scoring
- Sound knowledge of analytics and the current threat landscape
- Executive presence in front of C-suite and vice-president level customers
- Ability to lead across matrixed, remote-first teams
Qualifications
- Earlier work in SOC operations, detection engineering or incident response before product roles
- Awareness of AI security, including how AI, ML and agent systems get attacked and defended
Core Skills
Benefits
- Pay set by the work performed rather than by prior salary
- Health coverage that reaches families in many regions
- Schedule and location flexibility across numerous roles
- Generous yearly vacation allowance
- Matching of donations and volunteer effort up to $2,000 (or local equivalent)
- Volunteer time of up to 40 hours a year for causes the employee chooses
- Parental leave of at least 16 weeks
Frequently Asked Questions
Answers are based only on the employer’s listing; where it doesn’t say, neither do we.
Is the job remote?
Yes. The listing is remote and gives the United States as the location.
What product experience is needed?
7 to 10 years in product management, including at least four years in security or enterprise B2B software.
What compensation is listed?
Base salary only, with no variable component. The posting does not state a salary range.
What goes beyond XDR?
Exposure and vulnerability management, with patching, device control, host firewall controls and remediation workflow.
Sample Interview Questions
AI-generated questions tailored to this specific role — a preview of the full practice set.