Senior Product Manager

The core responsibilities for the job include the following:
Own Direction and Roadmap (Core Mandate):
Set and defend the product roadmap for Code Insights secrets detection, SAST, and SCA/dependency risk rooted in real AppSec domain expertise, not secondhand requirements.
Partner with engineering to ship high-quality, well-scoped releases; own the trade-off calls when scope, timeline, and security depth conflict.
Report product health, risk, and roadmap progress directly to senior leadership, including exec/C-suite settings, with the judgment to say what leadership needs to hear, not just what's easy to report.
Be the External and Internal Face of the Product:
Pitch Code Insights directly to CISOs, SecOps leads, and security architects; be comfortable being challenged on technical depth and defending the product's position against competing SAST, SCA, and secrets-detection tools.
Own customer pilots end-to-end; from technical validation through commercial conversion, you carry the pilot, not just support it.
Close the loop from field to roadmap: translate customer and prospect input into product decisions, and be willing to say no to requests that don't fit the strategy.
Represent the product internally to sales, marketing, and execs as the person who can explain not just what Code Insights does, but why it wins and where it's still catching up.
Grow the Product-Led Opportunity (Growth Track):
Use Code Insights' shift-left, developer-first design (CLI, pre-commit hooks, CI/CD integration) as a foundation to build organic, self-serve adoption.
Partner with Design and Marketing to test and refine the self-serve journey from first scan to habitual use to internal champion.
Treated as a strategic opportunity to grow into, not a prerequisite; we'll support you in building this muscle if it's new to you.
Requirements:
Seniority of 6-7+ years in product management or a customer-facing technical role, with real ownership of roadmap decisions, not just execution.
Security domain grounding: working knowledge of application security concepts (SAST, SCA, secrets detection, or software supply chain security) sufficient to hold your own with security practitioners. Deep AppSec expertise is a strong plus; a fast learner with adjacent technical credibility can also thrive here.
Business and interpersonal range: we're actively looking for candidates with an MBA or equivalent business training who pair that with technical depth; people who can move fluently between an engineering standup, a CISO pitch, and an exec update in the same week. Strong written and verbal communication, executive presence, and the judgment to know when to push back matter as much as domain knowledge.
Commercial instinct: comfortable owning outcomes tied to revenue and retention, not just shipped features; you think in terms of business impact, not just backlog throughput.
PM fundamentals: track record managing roadmaps, backlog hygiene (Jira or equivalent), and clear stakeholder reporting.
Nice to have, not required, prior exposure to PLG or self-serve growth motions. We see this as an opportunity for you to grow into, not a filter we're screening for.

Experience
6-10 yrs