GitLab
Senior Product Manager, Secret Detection and Vulnerability Research
Remote, United States · Remote · Manager · Full-time · Posted Aug 17, 2026
About the job
Own the strategy, product quality, and business outcomes for GitLab’s Secret Detection offering and Vulnerability Research function, from preventing and detecting exposed secrets to shipping vulnerability intelligence.
What you'll do
- Set strategy for the secret lifecycle across GitLab.com, Dedicated, and Self-Managed, including prevention, detection, validation, revocation, and reporting.
- Define and measure the sourcing, validation, versioning, and quality of detection rules, advisories, and intelligence feeds.
- Drive adoption, expansion, competitive win rate, and revenue contribution; shape packaging and pricing.
What they ask for
- Domain depth in application security, vulnerability management, or security research, with experience on or adjacent to scanners, detection content, threat intelligence, or SDLC security tooling.
- Technical credibility to reason about detection logic, data pipelines, CI integration, and coverage-versus-noise tradeoffs.
- Commercial reasoning grounded in revenue mechanics, buyer motion, and competitive displacement.
- Evidence of using AI as a force multiplier in research, analysis, data pulls, prototyping, or drafting.
Nice to have
- Hands-on background as a developer, security engineer, red teamer, or researcher.
- Experience with credential and token ecosystems or commercializing a data or intelligence asset.
Tools
GitLab.com, Dedicated, Self-Managed
AI focus
Use AI in personal workflows and determine where it can support product triage, rule generation, remediation guidance, and reducing human review per finding.
Model-written summary · the original posting is authoritative