Lead Product Manager

Overview

Prime Security is looking for our first lead Technical Product Manager for our Secure Product Development Platform—an innovative solution that seamlessly integrates security into every stage of the software development lifecycle. This role represents a unique opportunity to shape the future of secure product development at scale.

As a Technical Product Manager, you will drive the product lifecycle, from strategic vision to tactical execution. You'll transform high-level roadmaps into actionable development plans, architect sophisticated feature designs with detailed UX specifications, and orchestrate complex user journeys that delight developers while maintaining enterprise-grade security standards.

This job needs someone with a unique mix of skills: someone who knows a lot about managing products, understands security inside and out, and can speak both "tech" and "business." You'll be the person who turns complicated security needs into easy-to-use, top-notch product features that security teams and developers will actually love.

Key Responsibilities

• Own the Product Life Cycle: Take full ownership from conception through launch and iteration, ensuring every phase delivers maximum value while maintaining security excellence
• Translate Roadmap to Detailed Execution Plans: Transform high-level strategic roadmaps into granular, actionable development plans with clear deliverables, timelines, and success metrics that engineering teams can execute against
• Design Features with Detailed UX Specifications: Architect comprehensive feature designs that include wireframes, user flows, interaction patterns, and detailed functional requirements that seamlessly blend security capabilities with intuitive user experiences
• Orchestrate Complex User Journeys: Design and optimize smooth, effective, and sophisticated user journeys for different users.

Required Qualifications

Experience:

• 5+ years of enterprise product management experience, with at least 3 years focused on cybersecurity 
• Demonstrated success managing B2B enterprise security products through complete product life cycles
• Proven track record of driving product adoption and customer success metrics
• Experience working directly with software development teams and understanding their workflows
• Hands-on experience with threat modeling and security architecture in enterprise environments - an advantage

Skills and Knowledge:

• Deep understanding of application security principles and secure development practices
• Working knowledge of security frameworks and standards (OWASP, NIST, ISO 27001, MITRE ATT&CK, CIS Controls)
• Understanding of common vulnerability types and remediation strategies
• Familiarity with software security testing tools and approaches
• Proficiency with threat modeling methodologies (STRIDE, PASTA, LINDDUN, DREAD, Attack Trees) - A major advantage
• Industry certifications such as CISSP, ISSLP, ISSAP are a plus

Development & DevOps Knowledge:

• Extensive understanding of SDLC/PDLC phases and security integration points:
• Requirements gathering and security requirements definition
• Design-phase security reviews and architecture assessments
• Implementation-phase secure coding practices
• Security testing and validation methodologies
• Deployment and production security considerations
• Experience with CI/CD pipelines and security tool integration
• Proficiency with development platforms (GitHub, GitLab, Bitbucket, Azure DevOps)
• Familiarity with project management and collaboration tools (JIRA, Confluence, ServiceNow)
• Knowledge of AI/ML applications in security and software development
• Understanding of AI-assisted coding tools and their security implications
• Familiarity with LLM security considerations and secure AI development practices

Core Competencies:

• Exceptional written and verbal communication skills with ability to influence at all organizational levels
• Strong analytical and problem-solving capabilities with a data-driven mindset
• Ability to translate complex technical concepts for diverse audiences (executives, engineers, security teams)
• MBA or advanced degree in Computer Science, Information Security, or related field - An advantage