Lead Product Manager, AI-SOC

Job not on LinkedIn

🔥 2 minutes ago

🏄 California – Remote

🏄 California – Remote

💵 $156.2k - $211.4k / year

⏰ Full Time

🟠 Senior

🤖 AI Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Rapid7

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2000

🔒 Cybersecurity

Cybersecurity

Rapid7 is a cybersecurity company that provides a range of solutions designed to secure cloud, identity, and endpoint products. The company's Command Platform utilizes artificial intelligence to offer deep insights into cybersecurity threats and vulnerabilities. Rapid7's offerings include Managed XDR for continuous monitoring, detection, and incident response, as well as tools for attack surface management, vulnerability management, and threat intelligence. The company is known for its open-source projects like Metasploit and Velociraptor, which aid in vulnerability research and enhancing cybersecurity frameworks. Rapid7 also emphasizes community and culture, contributing to diversity, equity, and inclusion, and engages in public policy advocacy to strengthen cybersecurity on a broader scale. They serve over 11,000 global companies and deliver expert analysis on attack trends and emergent threats through Rapid7 Labs.

📋 Description

• Define and maintain the full library of investigation playbooks and queries across alert types, data sources, and severities • Establish telemetry and schema requirements for new log sources and alert integrations in partnership with engineering and data teams • Own status disposition logic and the suppression framework, evolving from rule-based heuristics toward an ML-driven disposition engine • Incorporate threat intelligence, including IOC matching, actor context, and TTP enrichment, into autonomous investigation workflows • Establish and track quality metrics including coverage rate, disposition accuracy, and false positive rates • Leverage feedback loops from MDR analysts to improve autonomous investigation quality • Partner with MDR operations to ensure outputs meet the quality bar required to replace manual Tier 1–2 triage at scale • Define and execute the strategy for Rapid7’s autonomous investigation platform • Translate Detection & Response expertise into a high-impact product roadmap

🎯 Requirements

• 7+ years of experience in security operations, alert triage, detection engineering, or security engineering within an MDR, MSSP, or enterprise SOC environment • Deep working knowledge of Detection & Response across endpoint, network, identity, cloud, or SaaS/email domains • Direct experience with major EDR/XDR platforms to write queries, review telemetry, and make defensible disposition decisions • Strong proficiency in investigation methodology and the MITRE ATT&CK framework • 2+ years in product management or equivalent SOC leadership translating domain expertise into engineering requirements • Ability to resolve complex product challenges and enable operational momentum across diverse stakeholder groups • Ability to establish ownership and accountability for delivery outcomes, quality metrics, and operational commitments • Ability to build cross-functional networks across engineering, data science, and security operations • Ability to drive change when transitioning legacy operations toward AI-driven autonomous workflows • Strong written and verbal communication skills • US Citizenship with active or prior security clearance experience in federal or government environments • Alignment with Rapid7’s core values