Principal Product Manager - Identity Threat Detection & Response

Elastic
Spain
Workplace: OnsiteFull timeEUR 80,400 - 127,200 annuallyFunction: Product ManagementExperience: 10+ yearsSkills: ["Bias to action","Communication","Stakeholder management","Customer focus","Influence"]

Define and own the vision, strategy, and roadmap for identity threat detection and response within Elastic Security. Build an identity-defense outcome on top of Entity Analytics and Entity Store, covering non-human and AI agent identities. Partner with threat research, detection engineering, design, and enterprise customers to drive detection-to-response, integrate identity signals across SIEM/XDR workflows, and evangelize Elastic’s identity capabilities.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Elastic
Elastic
1 day ago

Principal Product Manager - Identity Threat Detection & Response

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Define and own the vision, strategy, and roadmap for identity threat detection and response within Elastic Security. Build an identity-defense outcome on top of Entity Analytics and Entity Store, covering non-human and AI agent identities. Partner with threat research, detection engineering, design, and enterprise customers to drive detection-to-response, integrate identity signals across SIEM/XDR workflows, and evangelize Elastic’s identity capabilities.
Location: Spain
Workplace: Onsite
Employment Type: Full time
Job Function: Product Management
Seniority: Mid level

Key Responsibilities

  • •Define and own the vision, strategy, and roadmap for a credible identity threat detection and response function in Elastic Security.
  • •Own the plan for non-human and AI agent identities, including modeling service accounts, workloads, secrets, and self-directed agents with behavior standards and lifecycles.
  • •Partner with threat research and detection engineering to focus on identity-specific threats such as credential access, privilege escalation, and identity-based lateral movement.
  • •Drive response and containment by turning detections into action using identity-system integrations, automated responses, and human oversight for important actions.
  • •Collaborate with enterprise customers and design teams to integrate identity signals across endpoint, cloud, and network data in SIEM and XDR experiences, and evangelize Elastic’s identity capabilities.

Pay and Benefits

Salary: EUR 80,400 - 127,200 annually
Perks:Health InsuranceParental LeavePaid LeaveVolunteer Projects

Key Requirements

  • •10+ years of product management or solution delivery experience for security products such as SIEM, XDR, EDR, identity security, or detection and response.
  • •Deep knowledge of identity-based attack techniques and identity systems, including Active Directory, cloud identity providers, SSO, OAuth, and privileged access, across on-premises and cloud.
  • •Understanding of ITDR and entity behavioral analytics (UEBA), including entity-based identity threat modeling.
  • •Fluency with non-human identities (service accounts, workloads, secrets, and AI agents) and why traditional human-identity rules may not apply.
  • •Strong AI/ML fluency (behavioral analytics, anomaly detection, LLMs, agentic systems) and ability to collaborate with data scientists and engineers.
Experience:10+ years
Skills:Bias to actionCommunicationStakeholder managementCustomer focusInfluence
Languages:English
Tech Stack:SIEMXDREDRActive DirectorySSOOAuthUEBAEntity analyticsEntity storeAnomaly detectionLLMsLLMAI agentsAgentic systemsBehavioral analyticsIdentity providersTokensPrivileged access

Company Brief

Elastic
Builds the Elastic Stack (Elasticsearch, Kibana, Beats, Logstash) and provides search, observability, and security solutions that enable organizations to search, analyze, and protect data in real time across applications, infrastructure, and enterprises.
Industry: Data Infrastructure
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Amsterdam, Netherlands
Founded: 2012
WebsiteLinkedIn