Principal Product Manager, SIEM and Security Operations

Own the strategy and roadmap for next-gen SIEM and SecOps, partnering with SOC practitioners and cross-functional teams to validate direction with evidence.

Responsibilities

• Set target customers, priority problems, and differentiation for SIEM and SecOps; translate insights into a roadmap and investment decisions with clear rationale for what to pursue, defer, or stop.
• Identify who buys and who uses the product, and what drives budget allocation; use market research, competitive analysis, win/loss insights, and analyst feedback to build business cases.
• Partner with Product Marketing, Sales, and Finance on pricing, packaging, messaging, content, and go-to-market; track adoption, time to value, detection quality, and investigation and response outcomes.
• Evaluate retention, expansion, and win rate with commercial teams.
• Analyze how AI-enabled attacks present in telemetry and behavior; identify where detections must change to catch new tactics.
• Determine where Behavioral AI and AI agents can support detection tuning, alert prioritization, investigation, and response, and where analyst oversight must remain central.
• Use telemetry, Unified Entity Intelligence, and investigation evidence to guide what gets built and how success is measured.
• Work with SOC leaders, analysts, detection engineers, and platform teams; observe workflows to find friction points and validate improvements.
• Test ideas with prototypes, usability studies, design partners, and pilots before committing to substantial development.
• Define pilot success criteria across value, usability, feasibility, and willingness to pay; evaluate AI for evidence quality, false positives, missed threats, analyst effort, latency, cost, and how often analysts overturn agent conclusions.
• Turn validated customer problems into requirements: workflows, user stories, and testable acceptance criteria; cover SIEM ingestion, normalization, analytics, search, retention, investigation evidence, SOAR integrations, and response playbooks.
• Collaborate with Engineering and Product Owners for backlog refinement, sprint planning, and sprint reviews; clarify requirements, resolve dependencies, review demos and test results, and make timely scope and priority tradeoffs.
• Own product priorities and constraints; coordinate feasibility and tradeoffs with Engineering (architecture and implementation ownership).
• Agree on release readiness for security, privacy, access controls, human approval, reliability, scale, and performance.
• Coordinate shared capabilities with IRM and AI Risk and Response product teams, including how SIEM data and detections support monitoring of AI agents.
• Build alignment and earn support across teams and leadership; surface risks early, use evidence to resolve disagreements, and communicate roadmap decisions and delivery expectations.
• Represent Gurucul in analyst briefings, customer discussions, webinars, and conferences; demonstrate the product, explain direction, and partner on positioning, launches, competitive guidance, and sales enablement.

Requirements

• 8+ years of product management or equivalent product leadership experience, including 3+ years in enterprise cybersecurity or SecOps products, with ownership of strategy and delivery.
• Experience operating in a fast-growing environment with startup-like constraints, balancing strategic investment, customer commitments, and engineering capacity.
• Working understanding of SIEM architecture and SOC workflows, from telemetry ingestion and normalization through analytics, detection, investigation, and response; working knowledge of SOAR integrations and playbooks.
• Understanding of how AI and ML apply to security analytics, including behavioral models, AI agents, evidence quality, evaluation, and human oversight; awareness of how attackers are starting to use AI.
• Ability to assess market opportunities, buyers, competitors, and investment choices; contribute to pricing and packaging with experience in decisions that improve adoption or business outcomes.
• Comfort discussing data architecture, integrations, APIs, analytics, and enterprise SaaS; ability to write clear requirements and navigate product tradeoffs with Engineering.
• Experience using interviews, hypothesis testing, prototypes, and pilots to guide product decisions; able to explain how evidence changed the roadmap and how results were measured.
• Clear communication and ability to lead customer discussions and demonstrations; capable of briefing analysts, speaking publicly, and answering challenging questions.

Technologies

• SIEM, SecOps, SOAR
• Unified Entity Intelligence
• AI agents, Behavioral AI, AI, ML
• APIs, Enterprise SaaS

Benefits

• Annual base salary range: $170,000–$195,000.
• Medical, dental, vision, and life insurance
• EAP
• 401K
• Paid Time Off
• Paid holidays

Preferred Qualifications (Nice to Have)

• Experience delivering AI- or ML-powered detection, security analytics, or investigation capabilities, including agentic or LLM-based features, with performance evaluation in production.
• Experience with security data lakes, customer-owned storage, distributed analytics, or large-scale SIEM deployments.
• Experience with SOAR playbooks, response integrations, and deployment across SaaS, cloud, on-premises, or hybrid environments.
• Experience launching or expanding products at a smaller or growing enterprise software company, or leading industry analyst briefings and public presentations.

Location

• Hybrid in El Segundo, CA, or remote within the US.

Apply

Send resumes to [email protected].