The Security Product Manager for Perimeter Defense will report directly to the Head of Defensive Engineering and lead the product strategy for perimeter security. The role focuses on improving visibility, security coverage, assurance, and risk reporting across teams.
Role Overview
This position is part of Global Cyber Security within Defensive Engineering. The work supports a consistent approach to perimeter security by coordinating capabilities such as attack surface management, vulnerability management, web application protection, responsible disclosure, bug bounty programs, and security testing to strengthen the organization’s overall security posture.
The Security Product Manager defines and drives strategy, roadmap, governance, and security outcomes for perimeter defense by aligning multiple teams around measurable improvements in coverage and risk communication.
Responsibilities
- Define and maintain the strategy, roadmap, and security outcomes for the Perimeter Defense product.
- Establish visibility into perimeter-facing assets, including applications, infrastructure, domains, APIs, cloud services, and other externally accessible technologies.
- Identify security coverage gaps and partner with the appropriate teams to drive improvements.
- Collaborate with GTS product owners and engineering teams to ensure security requirements and priorities are incorporated into platform roadmaps.
- Drive continuous assurance using attack surface management, vulnerability management, security testing, and related security capabilities.
- Define onboarding requirements and security standards for new perimeter-facing services and technologies.
- Set up metrics, reporting, and governance processes to measure effectiveness and communicate risk and progress to leadership.
- Support audit, regulatory, risk, and control assurance activities tied to perimeter security.
Requirements
- Bachelor’s degree in Information Security, Computer Science, Engineering, Information Technology, or a related field (or equivalent experience).
- Experience in cybersecurity, technology, risk management, product management, or related disciplines.
- Familiarity with security technologies and controls such as vulnerability management, firewalls, web application security, cloud security, or related areas.
- Relevant cybersecurity or product management certifications are a plus.
- Ability to work effectively across global teams and multiple stakeholder groups.
- Strong written and verbal communication skills.
- Interest in security, product management, and driving measurable business outcomes.
Technologies
- Attack surface management
- Vulnerability management
- Firewalls
- Web application security
- Cloud security
What We Value
- Strong communication, collaboration, and stakeholder management skills.
- Ability to translate security risks and requirements into practical business and technology outcomes.
- Understanding of cybersecurity concepts such as vulnerability management, perimeter security, application security, cloud security, and attack surface management.
- Experience coordinating initiatives across multiple teams and stakeholders.
- Strong analytical, problem-solving, and decision-making skills.
Work Location and Work Requirement
- Location: Boston, MA (hybrid)
- Work model: Hybrid work model in accordance with company policy.
- Global support: Flexibility to support global teams across multiple time zones as needed.
Compensation
Salary range: USD 120,000 - 202,500 per year.
Benefits
- 401K with company match
- Insurance coverage including basic life, medical, dental, vision, long-term disability, and other optional additional coverages
- Paid-time off including vacation, sick leave, short term disability, and family care responsibilities
- Access to Employee Assistance Program
- Incentive compensation including eligibility for annual performance-based awards (excluding certain sales roles subject to sales incentive plans)
- Eligibility for certain tax advantaged savings plans
Reporting Line
Reports directly to the Head of Defensive Engineering.
