Principal Product Manager, XDR & Exposure Management

Elastic

Confirmed live yesterday Low trust

Remote

Quick summary

Work type: Remote
Location: Remote
Posted: 17 days ago
Freshness: Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $200k

$148k most similar roles pay here $245k

This listing doesn't post a salary. Most similar roles pay $176,212–$224,000.

Based on 240 similar postings.

Employer

About Elastic

Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.

Elastic currently has 240 open roles on FindRole.

Listed pay typically runs $133,100–$210,600 across 91 roles with salary data.

Most-posted roles

View all roles at Elastic

At a glance

TL;DR · Principal Product Manager, XDR & Exposure Management

Role Posting Log in to save

Principal Product Manager (XDR & Exposure Management) - Security Solutions joins the Elastic Security team to own XDR and its converging exposure and vulnerability capabilities. You will drive the strategy and delivery of cross-domain detection and response across endpoint, cloud, identity, and network environments. Your daily work involves managing features like patch management, advanced device control, host firewall management, and remediation workflows while integrating signals from attack surface and cloud posture to improve prioritization. You will collaborate with Engineering, Security Labs, and Entity Analytics teams to develop technical requirements and roadmap artifacts. The role requires expertise in EDR, SIEM, and security operations, alongside a deep understanding of the cyber threat landscape and data science techniques for detection. You must possess the executive presence to engage with CISOs and the technical credibility to lead complex product initiatives.

What does a Product Manager earn in Remote?

Median $207754 from 108 postings across 33 companies.

See salary data

Skills

XDR EDR SIEM Vulnerability Management Patch Management AI Data Science Security Operations SOC Automation

What you'll do

Own the end-to-end XDR strategy across endpoint, cloud, identity, and network domains.
Lead the expansion of XDR into exposure and vulnerability management features like patch management and remediation workflows.
Define the integration points between XDR, attack surface, and cloud posture data to prioritize security risks.
Partner with internal teams to integrate asset criticality and entity context into exposure prioritization.
Serve as the primary product voice for C-suite stakeholders to communicate roadmap direction and strategic decisions.
Analyze the competitive landscape of security vendors and MDR providers to drive differentiated product features.
Write high-quality technical requirements for engineering teams based on research from the Security Labs team.
Create internal and external artifacts, such as decision memos and roadmap trackers, to provide visibility without meetings.

What we're looking for

You must have 7–10 years of product management experience, including at least 4 years in security or B2B enterprise software.
You must possess hands-on knowledge of XDR, EDR, SIEM, or broader security operations as a product manager or practitioner.
You must demonstrate fluency in exposure and vulnerability management, specifically regarding prioritization based on exploitability and reachability.
You must have a solid understanding of analytics, data science techniques for detection, and the current cyber threat landscape.
You must possess executive presence to communicate roadmaps and deliver difficult news to C-suite and VP-level stakeholders.
You must be able to write high-quality technical requirements that engineering teams can execute without further clarification.
You must have experience operating across Product, Engineering, Sales, and Customer Success functions in a matrixed organization.
Familiarity with AI security and the defense of ML or agentic systems is preferred.

Save