Senior Product Manager, Secret Detection, Vulnerability Research

Job not on LinkedIn

🔥 0 minutes ago

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

GitLab

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2014

💼 Consulting

📣 Marketing

🤖 Artificial Intelligence

💰 Secondary Market on 2020-11

Consulting • Marketing • Artificial Intelligence

GitLab is the most comprehensive AI-powered DevSecOps platform, offering tools for automated software delivery, security, and compliance throughout the software development lifecycle. It provides solutions across areas such as AI-assisted development, continuous integration/continuous deployment (CI/CD), source code management, and vulnerability management. GitLab aims to simplify and accelerate software delivery by uniting development, security, and operations on a unified platform. It is particularly recognized for its AI code assistants and has been named a leader in the Gartner Magic Quadrant™ for DevOps Platforms, making it a preferred choice for many enterprises.

📋 Description

• Own business outcomes for Secret Detection and Vulnerability Research, including adoption, expansion, competitive win rate, and revenue contribution • Set strategy for the full secret lifecycle across GitLab.com, Dedicated, and Self-Managed • Treat detection content as a product by defining sourcing, validation, versioning, measurement, and customer-visible quality • Own detection-quality metrics and improve precision while reducing false positives • Reason about rule syntax, entropy heuristics, scanner misses, detection logic, data pipelines, and CI integration • Use AI for research, analysis, data pulls, prototyping, drafting, triage, rule generation, remediation guidance, and reducing human review burden • Partner with engineering, security research, threat intelligence, Field, and GitLab Security teams • Communicate precisely and asynchronously so distributed teams can act without meetings

🎯 Requirements

• Domain depth in application security, vulnerability management, or security research • Experience working on or adjacent to scanners, detection content, threat intelligence, or SDLC security tooling • Understanding of how security products are evaluated in a bake-off • Technical credibility to reason about detection logic, data pipelines, CI integration, and coverage-versus-noise tradeoffs • Commercial reasoning focused on revenue mechanics, buyer motion, and competitive displacement • Evidence of using AI as a force multiplier for research, analysis, data pulls, prototyping, or drafting • Judgment under ambiguity, with ability to provide structured options and recommendations • Ability to turn noisy, technical, politically contested problems into clear alignment documents • Bonus: hands-on background as a developer, security engineer, red teamer, or researcher • Bonus: experience with credential and token ecosystems • Bonus: experience commercializing a data or intelligence asset

🏖️ Benefits

• Benefits to support your health, finances, and well-being • Flexible Paid Time Off • Team Member Resource Groups • Equity Compensation & Employee Stock Purchase Plan • Growth and Development Fund • Parental Leave