Senior Product Manager, Secret Detection and Vulnerability Research

GitLab

Confirmed live yesterday High trust
Remote

Quick summary

Work type
Remote
Location
Remote
Posted
25 days ago
Freshness
Confirmed live yesterday

Market check

Salary context

How this pay compares to similar roles

Similar $191k
$144k most similar roles pay here $240k

This listing doesn't post a salary. Most similar roles pay $165,650–$216,375.

Based on 240 similar postings.

Employer

About GitLab

GitLab is an all-remote software company that develops an AI-powered DevSecOps platform combining source code management, CI/CD, security scanning, and project planning in a single application.

GitLab currently has 79 open roles on FindRole.

Listed pay typically runs $137,400–$213,600 across 61 roles with salary data.

Most-posted roles

View all roles at GitLab

At a glance

TL;DR · Senior Product Manager, Secret Detection and Vulnerability Research

As a Senior Product Manager, Secret Detection and Vulnerability Research, you will join the Security product management organization to own the secret detection offering and the vulnerability research function. You will manage the full lifecycle of secrets, including prevention, detection, validation, and revocation, while treating detection content as a core product asset. Your daily work involves defining how rules, advisories, and intelligence feeds are sourced and measured to ensure high precision and quality. You will be responsible for business outcomes like adoption and revenue while collaborating with engineering, security research, and threat intelligence teams. The role requires deep domain expertise in application security or vulnerability management and technical credibility regarding detection logic and data pipelines. You must leverage AI as a force multiplier to analyze data, prototype flows, and manage the software supply chain security problem.

What does a Product Manager earn in Remote?

Median $207754 from 108 postings across 33 companies.

See salary data

What you'll do

  • Own business outcomes for Secret Detection and Vulnerability Research, including adoption, retention, and revenue targets.
  • Define the strategy for the full secret lifecycle, including prevention, detection, validation, revocation, and reporting.
  • Manage detection content as a product by defining how rules, advisories, and intelligence feeds are sourced and measured.
  • Monitor and improve detection quality metrics to minimize false positives and ensure high precision.
  • Analyze technical details like rule syntax and entropy heuristics to challenge engineering with informed alternatives.
  • Integrate AI into daily workflows to automate research, data analysis, and the creation of product features.
  • Collaborate with cross-functional teams including engineering, security research, threat intelligence, and sales.
  • Communicate complex technical information in writing for a distributed team to act on asynchronously.

What we're looking for

  • Possess domain depth in application security, vulnerability management, or security research.
  • Demonstrate technical credibility to reason about detection logic, data pipelines, and CI integration.
  • Exhibit commercial reasoning focused on revenue mechanics, buyer motion, and competitive displacement.
  • Provide evidence of using AI as a force multiplier in research, analysis, and prototyping.
  • Demonstrate judgment under ambiguity by providing structured options and recommendations.
  • Produce clear, concise written communication for distributed teams to act upon asynchronously.
  • Hands-on background as a developer, security engineer, red teamer, or researcher (preferred).
  • Experience with credential/token ecosystems or commercializing data/intelligence assets (preferred).

More like this

Similar roles

Senior Product Manager, Security

Microsoft

Redmond, WA 36 days ago $119,800$234,700
Security Architecture Secure Software Supply Chain CI/CD Threat Modeling Vulnerability Management FedRAMP FIPS NIST PQC/CNSA AI/ML Security code-signing Artifact Management Windows Cloud Services Product Management Security Assurance
5+ yrs exp

Senior Product Security Engineer

Adobe

San Jose, CA 7 days ago $180,600$261,450
OWASP Top 10 CVSS v3.1 Burp Suite Python PowerBI JIRA REST API OAuth2 AWS Lambda API Gateway SQL Injection XSS SSRF IDOR SOAR Webhooks curl DevTools
5+ yrs exp

Senior Product Security Engineer

Anduril Industries

Fort Collins, CO 151 days ago $144,000$191,000
C/C++ Golang Rust Python Linux Firmware IoT Embedded Systems Reverse Engineering Anti-tamper Cyber Survivability JSIG ICD 503 CSEIG SSECG NIST SP 800-160 CMMC Programmable Logic Devices
8+ yrs exp

Senior Product Security Engineer

Cloudflare, Inc

Austin, TX 51 days ago
Product Security Application Security AI LLM Threat Modeling STRIDE Vulnerability Management SAST Fuzzing Penetration Testing Bug Bounty JIRA Agile SaaS Distributed Systems
Hybrid

Senior Product Security Engineer I

Oscar Health

New York, NY 58 days ago
Application Security SAST DAST Vulnerability Management AI Integration Model Context Protocol (MCP) Code Review Risk Assessment Software Development
4+ yrs exp Hybrid