Principal Product Manager, XDR & Exposure Management

Elastic

Confirmed live yesterday Low trust

Remote

Quick summary

Work type: Remote
Location: Remote
Posted: 17 days ago
Freshness: Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $200k

$148k most similar roles pay here $245k

This listing doesn't post a salary. Most similar roles pay $176,212–$224,000.

Based on 240 similar postings.

Employer

About Elastic

Elastic is the company behind Elasticsearch and the Elastic Stack (Elasticsearch, Kibana, Beats, and Logstash). It sells search, observability, and security products built on that search engine, primarily through its Elastic Cloud managed service.

Elastic currently has 240 open roles on FindRole.

Listed pay typically runs $133,100–$210,600 across 91 roles with salary data.

Most-posted roles

View all roles at Elastic

At a glance

TL;DR · Principal Product Manager, XDR & Exposure Management

Role Posting Log in to save

Principal Product Manager (XDR & Exposure Management) - Security Solutions joins the Elastic Security team to own XDR and the converging exposure and vulnerability capabilities. This role involves managing the end-to-end strategy for detection and response across endpoint, cloud, identity, and network domains while expanding into patch management, device control, and remediation workflows. You will define product requirements in collaboration with engineering and research teams, manage noise reduction, and translate market trends into actionable roadmaps. The ideal candidate possesses 7–10 years of experience, including deep expertise in EDR, SIEM, and security operations. Key competencies include a strong understanding of asset criticality, threat landscapes, and data science techniques for prioritization. You will serve as the primary voice for C-suite stakeholders, navigating complex technical requirements to solve problems regarding how attacks unfold and where defenders lose time.

What does a Product Manager earn in Remote?

Median $207754 from 108 postings across 33 companies.

See salary data

Skills

XDR EDR SIEM Vulnerability Management Patch Management AI Data Science Security Operations SOC Asset Inventory

What you'll do

Own the end-to-end XDR strategy across endpoint, cloud, identity, and network domains.
Lead the expansion of XDR into exposure and vulnerability management features like patch management and remediation workflows.
Define the integration points between XDR, attack surface, and cloud posture signals to prioritize security risks.
Partner with internal teams to integrate asset criticality and entity context into exposure prioritization.
Serve as the primary product voice for C-suite stakeholders to communicate roadmap direction and strategic decisions.
Analyze the competitive landscape of security vendors and MDR providers to drive differentiated product positioning.
Write high-quality technical requirements for engineering and research teams based on real threat data.
Create internal and external artifacts, such as decision memos and roadmap trackers, to provide visibility without meetings.

What we're looking for

You must have 7–10 years of product management experience, including at least 4 years in security or B2B enterprise software.
You must possess hands-on knowledge of XDR, EDR, SIEM, or broader security operations as a product manager or practitioner.
You must demonstrate fluency in exposure and vulnerability management, specifically regarding prioritization based on exploitability and reachability.
You must have a solid understanding of analytics, data science techniques for detection, and the current cyber threat landscape.
You must possess technical credibility to write high-quality requirements and judge architectural feasibility independently.
You must have executive presence to engage with C-suite and VP-level stakeholders to deliver roadmaps and difficult news.
You must be able to lead across a matrixed organization and drive execution in a remote-first environment.
Familiarity with AI security, including how AI/ML systems are attacked and defended, is preferred.

Save