Principal Product Manager, Security

What you'll do

• Identify and prioritize security requirements and threat-model implications across product roadmaps; align Security Engineering priorities with product strategy.
• Own platform security investments, including key management, cryptographic foundations, authentication, and post-quantum readiness.
• Lead strategy for AI-era credential access and coach product managers on security-focused product work.

What they ask for

• 10+ years of product management experience, including significant time on security-critical products or platforms in a SaaS environment; exceptional candidates with equivalent depth, such as security engineers or researchers who moved into product, will also be considered.
• Demonstrable knowledge of cryptography, authentication protocols, identity and access management, zero-knowledge and end-to-end encrypted system design, and threat modeling.
• Fluency in credentials and identity, including passkeys and WebAuthn/FIDO.
• Track record of credibility with security engineering teams and shipping adopted security features; experience with risk-based tradeoffs and platform-level strategy.

Nice to have

• Security-community contributions such as conference talks, publications, research, open-source work, or standards participation.
• Hands-on AI security experience, compliance regimes such as SOC 2, FedRAMP, or FIPS, or vulnerability disclosure, incident response, threat intelligence, or bug bounty work.

Pay

USD 238,000–357,000 annual base salary; CAD 208,000–312,000 annual base salary

Tools

SaaS, passkeys, WebAuthn/FIDO, MCP, SOC 2, FedRAMP, FIPS

AI focus

Define strategy for agentic access to credentials, secrets for non-human identities and AI agents, and trust models around tools and protocols such as MCP.