Senior Product Manager, Secret Detection and Vulnerability Research

GitLab
United States
Workplace: RemoteFull timeFunction: Product ManagementSkills: ["Structured options","Recommendation","Bias for clarity","Asynchronous written communication","Judgment under ambiguity","Commercial reasoning","Technical reasoning","Collaboration"]

Own the business outcomes for secret detection and vulnerability research, driving adoption, expansion, competitive win rate, and revenue contribution. Set strategy across the full secret lifecycle—prevention, detection, validation, revocation, and reporting—across GitLab.com, Dedicated, and Self-Managed. Treat detection content as a product by defining sourcing, validation, versioning, and quality metrics. Partner with engineering, security research, threat intelligence, and Field teams to ship rules and advisory intelligence with measurable precision improvements.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
GitLab
GitLab
2 days ago

Senior Product Manager, Secret Detection and Vulnerability Research

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 2 hours agoStatus: Live

Job Summary

Own the business outcomes for secret detection and vulnerability research, driving adoption, expansion, competitive win rate, and revenue contribution. Set strategy across the full secret lifecycle—prevention, detection, validation, revocation, and reporting—across GitLab.com, Dedicated, and Self-Managed. Treat detection content as a product by defining sourcing, validation, versioning, and quality metrics. Partner with engineering, security research, threat intelligence, and Field teams to ship rules and advisory intelligence with measurable precision improvements.
Location: United States
Workplace: Remote
Employment Type: Full time
Job Function: Product Management
Seniority: Mid level

Key Responsibilities

  • •Own business outcomes for secret detection and vulnerability research, including adoption, expansion, competitive win rate, and revenue contribution.
  • •Set end-to-end strategy for the secret lifecycle: prevention, detection, validation, revocation, and reporting across GitLab.com, Dedicated, and Self-Managed.
  • •Define detection content as a product by sourcing, validating, versioning, and measuring rules, advisories, and intelligence feeds.
  • •Drive detection quality by treating false positives as a product defect and improving precision metrics.
  • •Partner across engineering, security research, threat intelligence, Field, and GitLab’s Security team; work asynchronously with clear, precise communication.

Pay and Benefits

Perks:Paid LeaveEquityParental LeaveLearning Budget

Key Requirements

  • •Domain depth in application security, vulnerability management, or security research, including work adjacent to scanners, detection content, threat intelligence, or SDLC security tooling.
  • •Technical credibility to reason about detection logic, data pipelines, CI integration, and tradeoffs between coverage and noise.
  • •Commercial reasoning grounded in revenue mechanics, buyer motion, and competitive displacement.
  • •Evidence of using AI as a force multiplier through research, analysis, data pulls, prototyping, and drafting.
  • •Judgment under ambiguity with structured options and a recommendation; bias for clarity on noisy, technical problems.
Experience:DevSecOpsApplication securityVulnerability managementSecurity researchSecurity scannersThreat intelligenceSDLC securityIntelligence asset
Skills:Structured optionsRecommendationBias for clarityAsynchronous written communicationJudgment under ambiguityCommercial reasoningTechnical reasoningCollaboration

Company Brief

GitLab
Provides a single application for the complete DevSecOps lifecycle, offering source code management, CI/CD, security, and collaboration tools to help teams deliver software faster and more securely.
Industry: Developer Tools
Company Size: Enterprise (1,001+ employees)
Revenue: USD 250M to 500M
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: San Francisco, United States
Founded: 2011
WebsiteLinkedIn