Principal Product Manager (XDR and Exposure Management) - Security Solutions

About the role

Elastic Security is looking for a Principal Product Manager to own XDR and the exposure and vulnerability capabilities converging with it. The best detection-and-response products are built on a clear read of how attacks actually unfold and where defenders actually lose time. In this role you will own XDR end to end, from the detection-and-response core through the exposure and vulnerability work now converging with it. You will be the person a CISO trusts to explain why one exposure matters more than a thousand others, the person an engineering lead respects for the quality of your requirements, and the person who turns a fast-moving market into a roadmap Elastic can win on. You will work at the intersection of Product, Engineering, and the Elastic Security Labs research team, on a platform whose unified data layer enables native convergence.

Responsibilities

• Own XDR strategy and delivery across cross-domain detection and response across endpoint, cloud, identity, and network, from correlation and incident building through response actions and closed-loop automation.
• Lead Elastic's XDR expansion into exposure and vulnerability management, including features like patch management, advanced device control, host firewall management, and remediation workflow, while managing noise reduction.
• Draw the line between XDR, exposure, and adjacent surfaces such as attack surface and cloud posture, integrating those signals as inputs rather than building separate products.
• Partner with the Entity Analytics team on asset criticality and entity context to ensure exposure prioritization compounds rather than collides.
• Serve as the product voice with senior customer stakeholders (e.g., CISO, VP of Security Operations), delivering roadmap direction and deprioritizations while maintaining trust.
• Become the internal authority on the competitive landscape, including major security vendors and MDR service providers, and translate insights into differentiated product direction.
• Partner with engineering leads and Security Labs to write actionable requirements and ground detection/exposure scoring in real threat research.
• Create artifacts (e.g., roadmap trackers, decision memos, competitive briefs) to provide visibility for customers and internal stakeholders without requiring meetings.

Requirements

• Extensive Experience: 7–10 years of product management experience, with at least 4 years in security or B2B enterprise software. Proven track record of owning a product area with meaningful revenue impact and leading products from strategy to shipped outcomes.
• Endpoint Detection and Response Domain Knowledge: Hands-on knowledge of XDR, EDR, SIEM, or broader security operations, either as a product manager or practitioner (e.g., SOC analyst, detection engineer, incident responder). Ability to discuss correlation, response automation, and detection engineering credibly.
• Exposure and Vulnerability Fluency: Understand the difference between raw scanning, asset inventory, and true exposure prioritization, and why exploitability and reachability matter more than CVSS severity.
• Analytics and Threat Understanding: Solid comprehension of analytics/data science techniques behind detection and prioritization, and the current cyber threat landscape. Familiarity with AI security (e.g., how AI/ML systems are attacked and defended) is a plus.
• Technical Credibility: Earn respect from engineering through high-quality requirements and the ability to judge feasibility and scope independently.
• Executive Presence: Comfortable engaging with C-suite and VP-level customer stakeholders and delivering difficult news without damaging relationships.
• Cross-functional Fluency: Experience operating across Product, Engineering, Sales, and Customer Success, and driving alignment in a matrixed organization.
• Default to AI-Augmented Work: Regularly use AI tooling for synthesis, research, and delivery while owning final outcomes.
• Management and Influence: Demonstrated ability to lead in a dynamic, remote-first environment with autonomy and judgment expected of a principal-level product leader.
• Flexible Working Styles: Collaborate successfully across functions, adapt to varying projects/teams, and work autonomously in a distributed setting.

Benefits

• Competitive pay based on work performed, not previous salary.
• Health coverage for you and your family in many locations.
• Flexible locations and schedules for many roles.
• Generous number of vacation days each year.
• Financial donation matching up to $2,000 (or local currency equivalent).
• Up to 40 hours of paid volunteer time annually.
• Minimum of 16 weeks of parental leave.
• Stock program participation.
• Company-matched 401k with dollar-for-dollar matching up to 6% of eligible earnings.
• Holistic benefits emphasizing employee well-being.

Pay

The typical starting salary range for this role is $185,600–$234,900 USD. In select locations (e.g., Seattle, Los Angeles, San Francisco Bay Area, New York City Metro), the range is $212,600–$274,500 USD. Position within the range is based on factors including education, qualifications, certifications, experience, skills, geographic location, performance, and business needs.