Principal Product Manager - Identity Threat Detection & Response

Elastic
Poland
Workplace: OnsiteFull timePLN 369,400 - 584,300 annuallyFunction: Product ManagementExperience: 10+ yearsSkills: ["Communication","Leadership","Stakeholder management","Bias to action","Customer obsession"]

Define and own the vision, strategy, and roadmap for identity threat detection and response within Elastic Security. Evolve identity-defense capabilities from Entity Analytics and Entity Store into a differentiated ITDR function, including non-human and AI agent identities. Partner with threat research, detection engineering, designers, and enterprise customers to translate identity attack requirements into detections, response/containment workflows, and market-leading enablement.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
Elastic
Elastic
1 day ago

Principal Product Manager - Identity Threat Detection & Response

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 7 hours agoStatus: Live

Job Summary

Define and own the vision, strategy, and roadmap for identity threat detection and response within Elastic Security. Evolve identity-defense capabilities from Entity Analytics and Entity Store into a differentiated ITDR function, including non-human and AI agent identities. Partner with threat research, detection engineering, designers, and enterprise customers to translate identity attack requirements into detections, response/containment workflows, and market-leading enablement.
Location: Poland
Workplace: Onsite
Employment Type: Full time
Job Function: Product Management
Seniority: Sr. Manager level

Key Responsibilities

  • •Define and own the vision, strategy, and roadmap for a credible ITDR function in Elastic Security, evolving entity analytics into identity-defense outcomes.
  • •Model and plan for non-human and AI agent identities (service accounts, workloads, secrets, self-directed agents), including behavior standards, ownership, and lifecycle.
  • •Partner with threat research and detection engineering to focus on identity-specific threats such as credential access, privilege escalation, and identity-based lateral movement.
  • •Drive response and containment strategy ('R' in ITDR) by turning detections into action with identity-system integrations and automated responses with human oversight.
  • •Collaborate with enterprise customers, designers, and the SIEM/XDR teams to integrate identity signals into analyst workflows and product experiences.

Pay and Benefits

Salary: PLN 369,400 - 584,300 annually
Perks:Health InsurancePaid LeaveParental Leave

Key Requirements

  • •10+ years of experience in product management or solution delivery for security products (SIEM, XDR, EDR, identity security, detection and response).
  • •Lead sophisticated, data-intensive products from inception through launch and iterative growth.
  • •Deep knowledge of identity-based attack techniques and identity fabric, including Active Directory, cloud identity providers, SSO, OAuth, and privileged access.
  • •Fluency with non-human identities (service accounts, workloads, secrets, AI agents) and understanding how they differ from human-identity rules.
  • •Technical fluency in AI/ML (behavioral analytics, anomaly detection, LLMs, agentic systems) and ability to work closely with data scientists and engineers.
Experience:10+ yearsSecurity productsSIEMXDREDRIdentity securityDetection and responseAI/ML
Skills:CommunicationLeadershipStakeholder managementBias to actionCustomer obsession
Languages:English
Tech Stack:Elastic SecurityEntity AnalyticsEntity StoreActive DirectorySSOOAuthPrivileged accessUEBASIEMXDREndpointCloud identity providersAnomaly detectionLLMsAgentic systemsService accountsTokensIdentity providersAI agents

Company Brief

Elastic
Builds the Elastic Stack (Elasticsearch, Kibana, Beats, Logstash) and provides search, observability, and security solutions that enable organizations to search, analyze, and protect data in real time across applications, infrastructure, and enterprises.
Industry: Data Infrastructure
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: Amsterdam, Netherlands
Founded: 2012
WebsiteLinkedIn