Product Manager: Security

The role

You will own the security product, which is an AI-driven scanner that hunts for vulnerabilities across codebases. You will manage the product roadmap, detection quality, and the findings experience for AppSec and CISO personas.

What you will do

• Own the security product end to end including deep codebase scans and security findings in pull request reviews
• Decide which vulnerability classes, scanner capabilities, and languages to invest in
• Define detection quality metrics including precision, recall, and noise bars
• Own how findings are presented, triaged, and resolved
• Turn detection-quality evidence into product decisions and customer-facing proof
• Own the AppSec and CISO persona
• Partner with Sales on enterprise security evaluations and competitive positioning
• Shape pricing and packaging of the security offering
• Work with engineers building the agentic scanning pipeline to bring customer and market views to detection priorities
• Hold detection changes to benchmark evidence

Required qualifications

• 5–8 years in the security space in product management at a security vendor or hands-on security work
• Product management experience with deeply technical products
• Practical knowledge of real vulnerability classes and how they are exploited
• Knowledge of the security tooling landscape including SAST, DAST, secrets scanning, IaC, and software composition analysis
• Technically fluent to read code and understand APIs
• Write well and communicate precisely
• Comfortable with ambiguity

Nice to have

• A hands-on practitioner past such as CVEs, bug bounty history, CTFs, or pentest findings
• Experience shipping products built on LLMs or agentic systems
• Direct vendor-side experience in the code security market
• Working knowledge of Git platforms as a power user or PM

Benefits

• Work on cutting-edge technology with real-world impact
• Collaborative and innovative environment
• Competitive salary
• Equity
• Benefits
• Professional development opportunities

Before you apply

• Submit your resume and relevant project samples or GitHub profiles

About the company

CodeRabbit is the governance and control layer for agentic software development. The platform provides independent validation for engineering teams through Review, Triage, Explain, and Secure.