Principal Product Manager, XDR & Exposure Management

Elastic

Confirmed live yesterday Low trust

Remote

Quick summary

Work type: Remote
Location: Remote
Posted: 17 days ago
Freshness: Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $200k

$148k most similar roles pay here $245k

This listing doesn't post a salary. Most similar roles pay $176,212–$224,000.

Based on 240 similar postings.

Employer

About Elastic

Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.

Elastic currently has 240 open roles on FindRole.

Listed pay typically runs $133,100–$210,600 across 91 roles with salary data.

Most-posted roles

View all roles at Elastic

At a glance

TL;DR · Principal Product Manager, XDR & Exposure Management

Role Posting Log in to save

Principal Product Manager (XDR & Exposure Management) - Security Solutions joins the Elastic Security team to own XDR and the convergence of exposure and vulnerability capabilities. This role involves managing the end-to-end strategy for detection and response across endpoint, cloud, identity, and network domains while expanding into features like patch management, device control, and remediation workflows. You will collaborate with Engineering, Security Labs, and Entity Analytics teams to translate complex security requirements into actionable roadmaps. The ideal candidate possesses 7–10 years of experience in product management, specifically within security or B2B enterprise software. Key competencies include deep knowledge of EDR, SIEM, and SOC operations, as well as a firm understanding of asset criticality, threat landscapes, and data science techniques for prioritization. You will serve as the primary voice to C-suite stakeholders regarding roadmap direction and competitive positioning.

What does a Product Manager earn in Remote?

Median $207754 from 108 postings across 33 companies.

See salary data

Skills

XDR EDR SIEM Vulnerability Management Patch Management AI Data Science Security Operations SOC Automation

What you'll do

Own the end-to-end XDR strategy and delivery across endpoint, cloud, identity, and network domains.
Lead the expansion of XDR into exposure and vulnerability management features like patch management and remediation workflows.
Define the integration points between XDR, attack surface, and cloud posture to prioritize security signals.
Partner with internal teams to integrate asset criticality and entity context into exposure prioritization.
Serve as the primary product voice for C-suite stakeholders to communicate roadmap direction and strategic decisions.
Analyze the competitive landscape of security vendors and MDR providers to drive differentiated product features.
Write high-quality technical requirements for engineering teams based on research from the Security Labs team.
Create internal artifacts such as decision memos and roadmap trackers to provide visibility without requiring meetings.

What we're looking for

You must have 7–10 years of product management experience, including at least 4 years in security or B2B enterprise software.
You must possess hands-on knowledge of XDR, EDR, SIEM, or broader security operations as a product manager or practitioner.
You must demonstrate fluency in exposure and vulnerability management, specifically regarding prioritization based on exploitability and reachability.
You must have a solid understanding of analytics, data science techniques for detection, and the current cyber threat landscape.
You must possess technical credibility to write high-quality requirements and judge architectural feasibility independently.
You must have executive presence to communicate roadmaps and deliver difficult news to C-suite and VP-level stakeholders.
You must be able to lead across a matrixed organization and drive execution in a remote-first environment.
Familiarity with AI security, including how AI/ML systems are attacked and defended, is preferred.

Save