Principal Product Manager – XDR & Exposure Management

About the role

Elastic’s Security team is seeking a Principal Product Manager to own the XDR platform and its expansion into exposure and vulnerability management. You will shape strategy, drive roadmap, and work closely with engineering, research labs and senior customers to deliver market‑leading security solutions.

Key responsibilities

• Define and execute the end‑to‑end XDR strategy across endpoint, cloud, identity and network detection and response.
• Lead the expansion of XDR into exposure and vulnerability management, including patch management, device control, host firewall and remediation workflows.
• Integrate attack‑surface and cloud‑posture signals as inputs for prioritisation rather than separate products.
• Partner with the Entity Analytics team to enrich exposure prioritisation with asset criticality and entity context.
• Act as the product voice with C‑suite customers, delivering roadmap direction and handling deprioritisation decisions.
• Maintain competitive intelligence on security vendors and MDR providers and translate insights into differentiated product direction.
• Collaborate with engineering leads and Security Labs to write clear, actionable requirements grounded in real threat research.
• Create roadmap trackers, decision memos and competitive briefs to keep stakeholders informed without meetings.

Required profile

• 7–10 years of product management experience, at least 4 years in security or B2B enterprise software, with a proven record of revenue impact.
• Hands‑on knowledge of XDR, EDR, SIEM or security operations, ideally with prior experience as a SOC analyst or detection engineer.
• Strong understanding of exposure and vulnerability prioritisation beyond CVSS, and familiarity with analytics and threat landscape.
• Executive presence to engage C‑suite and VP‑level stakeholders and communicate difficult decisions.
• Proven ability to lead across matrixed, remote‑first organisations and influence engineering through high‑quality requirements.

Required skills

• XDR, EDR, SIEM
• Patch management, device control, host firewall management, remediation workflow
• Analytics and data‑science techniques for detection and prioritisation
• AI tooling, AI/ML security concepts
• Cloud security signals and attack‑surface analysis

What we offer

• Competitive pay based on performance, not prior salary.
• Health coverage for you and your family in many locations.
• Flexible location and schedule options for a distributed workforce.
• Generous vacation allowance and parental leave of at least 16 weeks.
• Company‑matched charitable donations up to $2,000 and paid volunteer time.