Senior Product Manager, Secret Detection and Vulnerability Research
GitLabDevOps Platform company
United StatesSenior
Khosla Ventures
GV
ICONIQ Capital
Goldman Sachs
Y Combinator
August Capital
Product
About the role
TL;DR
Own GitLab's Secret Detection and Vulnerability Research, driving product strategy and outcomes.
- •As a Senior Product Manager, you will own GitLab's Secret Detection offering and the Vulnerability Research function.
- •This role focuses on detecting leaked credentials, ensuring their revocation, and preventing future exposures, while also treating vulnerability research as a product asset.
- •Key Responsibilities Own business outcomes for Secret Detection and Vulnerability Research, including adoption, retention, and revenue.
- •Set the strategy for the full secret lifecycle: prevention, detection, validation, revocation, and reporting.
- •Treat detection content as a product, defining sourcing, validation, versioning, and measurement.
- •Hold the line on detection quality and drive improvements in precision.
- •Use AI to compress the distance between question and answer, and build the case for AI's role in the product.
- •Requirements Domain depth in application security, vulnerability management, or security research.
- •Technical credibility to reason about detection logic, data pipelines, and CI integration.
- •Commercial reasoning, starting from revenue mechanics and buyer motion.
- •Evidence of using AI as a force multiplier in your own work.
- •Judgment under ambiguity and a bias for clarity.
Required skills
Product ManagementOWASPIAMSSOMFACI/CDDockerKubernetes
Nice-to-have skills
PythonJavaScriptGitLinuxVaultPenetration TestingGDPRHIPAA
Domain expertise
cybersecuritydeveloper-toolsaiproductivity
Benefits & perks
Health insurance, Flexible Paid Time Off, Equity Compensation, Employee Stock Purchase Plan, Growth and Development Fund, Parental Leave
Tech stack
PythonJavaScriptGitLinuxJiraConfluencePostmanSwaggerOpenAPIREST APIGitLab CIAWSGoogle CloudAzureTerraformDockerKubernetesCI/CDGitHub ActionsJenkinsVaultIAMSSOMFAOWASP
