below marketmost similar roles pay hereabove market
This role pays less than
53%
of similar roles. Most pay
$189,500–$231,000
— the blue band above.
At the midpoint, this role pays about
$208k
versus about
$210k
for comparable roles.
Based on 240 similar postings.
Employer
About Elastic
Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.
Elastic currently has
48 open roles
on FindRole.
Listed pay typically runs
$133,100–$210,600
across 47 roles with salary data.
The Principal Product Manager - Identity Threat Detection & Response will join the Elastic Security team to lead the vision, strategy, and execution for Identity Threat Detection and Response. This role involves defining the roadmap for detecting, investigating, and responding to identity-based threats, specifically focusing on non-human and AI agent identities. You will build on the Entity Analytics and Entity Store foundation to develop behavior standards for service accounts, workloads, and secrets. Key responsibilities include collaborating with threat researchers and data scientists to address credential access and privilege escalation while driving automated response strategies. You must possess deep expertise in Active Directory, cloud identity providers, SSO, OAuth, and privileged access. The role requires fluency in AI/ML concepts like behavioral analytics and anomaly detection to secure modern enterprise attack surfaces.
What does a Product Manager earn in Remote?
Median $207600 from 125 postings across 34 companies.
Define and own the vision, strategy, and roadmap for the Identity Threat Detection and Response (ITDR) function.
Manage the security plan for non-human and AI agent identities, including service accounts and workloads.
Partner with threat research and detection engineering to address credential access, privilege escalation, and lateral movement.
Drive the response and containment strategy by turning detections into automated actions with human oversight.
Collaborate with enterprise customers and sales teams to identify and prioritize identity-specific product requirements.
Work with the design team to integrate identity signals into the SIEM and XDR analyst workflows.
Evangelize Elastic's identity capabilities through blog posts, talks, and community interactions.
What we're looking for
10+ years of experience in product management or solution delivery for security products like SIEM, XDR, EDR, or identity security.
Proven record of leading sophisticated, data-intensive products from inception through launch and iterative growth.
Solid knowledge of identity-based attack techniques, including Active Directory, cloud identity providers, SSO, OAuth, and privileged access.
Proficiency in non-human identities, including service accounts, workloads, secrets, and AI agents.
Deep technical comprehension of the AI/ML landscape, including behavioral analytics, anomaly detection, LLMs, and agentic systems.
Demonstrated ability to lead across a matrixed organization and align multiple stakeholders toward a common vision.
Outstanding spoken and written communication skills to distill complex detection engineering and identity concepts for technical and non-technical audiences.
Export license may be required for individuals located in or nationals of Belarus, Cuba, Iran, North Korea, Syria, or Russia.
Artificial Intelligence
Cybersecurity
Cloud Services
Distributed Systems
Knowledge Graphs
Release Governance
Incident Management
Service Health Reviews
Software Development
Platform Technologies
Data Science