GitLab
Senior Product Manager, Security Platform Management
Job Summary
The role involves leading product management within GitLab’s Security Risk Management stage, focusing on Security Platform Management solutions such as Security Inventory, Asset Filtering, and tool orchestration. The ideal candidate will oversee the entire product lifecycle, collaborate with engineering, UX/UI, and customer teams, and drive adoption of enterprise security tools at scale. Strong experience in cybersecurity, vulnerability management, and enterprise security platforms is required, along with excellent communication skills. The position emphasizes improving user experiences and enabling customers to better understand and manage their security risk.
Required Skills
Benefits
Job Description
GitLab is an open-core software company that develops the most comprehensive AI-powered DevSecOps Platform, used by more than 100,000 organizations. Our mission is to enable everyone to contribute to and co-create the software that powers our world. When everyone can contribute, consumers become contributors, significantly accelerating human progress. Our platform unites teams and organizations, breaking down barriers and redefining what's possible in software development. Thanks to products like Duo Enterprise and Duo Agent Platform, customers get AI benefits at every stage of the SDLC.
The same principles built into our products are reflected in how our team works: we embrace AI as a core productivity multiplier, with all team members expected to incorporate AI into their daily workflows to drive efficiency, innovation, and impact. GitLab is where careers accelerate, innovation flourishes, and every voice is valued. Our high-performance culture is driven by our values and continuous knowledge exchange, enabling our team members to reach their full potential while collaborating with industry leaders to solve complex problems. Co-create the future with us as we build technology that transforms how the world develops software.
An overview of this role
This is a leading product role within the GitLab Security Risk Management stage. The Security Platform Management group provides GitLab Ultimate customers with a frictionless, holistic operational experience across our suite of security offerings. We enable AppSec and development teams to orchestrate and control their application security tools from within the GitLab platform and integrate seamlessly with external tools. We build foundational capabilities to empower security section development groups, provide lovable user experiences, and encourage consistency both within security section features and with cross-platform features that require collaboration with GitLab development groups in other sections.
As our new Sr. Product Manager, you will develop and clearly communicate the product vision, strategy, and detailed roadmap for our Security Platform Management solutions, including Security Inventory. Your focus will be on onboarding, configuration and orchestration of GitLab Application Security Platform including SAST, SCA, Secret Detection, DAST and additional tooling. You will collaborate closely with the relevant engineering teams and Product team members across different security scanners and adjacent areas like Compliance and Policies. In addition, you will work closely with the GitLab field team and will act as the 'voice of the customer' for the relevant stakeholders within the company.
What You'll Do
- Oversee the entire product lifecycle for Security Platform Management capabilities from vision generation to launch, ensuring timely delivery of product milestones including Security Inventory (beta and GA), Asset Filtering, and Configuration and customization profiles of GitLab suite of security tooling
- Define use-cases and collaborate with UX/UI design teams for detailed workflows with the goal of improving user experience across all security dashboards and vulnerability management interfaces
- Drive enterprise risk visibility initiatives by building asset inventory capabilities that help customers understand their attack surface and efficiently identify coverage gaps
- Collaborate with both functional and infrastructure engineering teams to build the underlying infrastructure and interfaces to support security tool orchestration and configuration at scale
- Provide teams with the relevant specs and requirements for foundational security platform capabilities that address scanner adoption challenges
- Work closely with product marketing to create customer-driven content that highlights platform value over individual feature comparisons
- Engage with Solution Engineering and Customer Success for customer feedback and challenges, particularly around Ultimate tier adoption barriers
- Partner with Growth team to enhance PLG Ultimate uptiering experiences and guided onboarding journeys
What You'll Bring
- 7+ years of experience in product management with Cyber Security Companies, with strong preference for experience in AST or vulnerability management platforms
- Solid understanding of how security teams and developers use enterprise security platforms like Snyk, Checkmarx, Veracode, Wiz, and other solutions
- Strong familiarity with the AST, ASPM and vulnerability management landscape, including market trends, competitive positioning, and enterprise adoption challenges
- Experience with security tool configuration and scanner deployment at enterprise scale
- Hands-on product owner with strong focus on UX/UI for complex security workflows and dashboards
- Understanding of enterprise security challenges including asset inventory, risk prioritization, and security tool orchestration
- Strong communication skills - both verbal and written, with ability to influence stakeholders across engineering, security, and field teams
- Experience driving adoption initiatives and addressing product-led growth challenges in B2B security software
The base salary range for this role’s listed level is currently for residents of listed locations only. Grade level and salary ranges are determined through interviews and a review of education, experience, knowledge, skills, abilities of the applicant, equity with other team members, and alignment with market data. See more information on our benefits and equity. Sales roles are also eligible for incentive pay targeted at up to 100% of the offered base salary.
Country Hiring Guidelines: GitLab hires new team members in countries around the world. All of our roles are remote, however some roles may carry specific location-based eligibility requirements. Our Talent Acquisition team can help answer any questions about location after starting the recruiting process.
Privacy Policy: Please review our Recruitment Privacy Policy. Your privacy is important to us.
GitLab is proud to be an equal opportunity workplace and is an affirmative action employer. GitLab’s policies and practices relating to recruitment, employment, career development and advancement, promotion, and retirement are based solely on merit, regardless of race, color, religion, ancestry, sex (including pregnancy, lactation, sexual orientation, gender identity, or gender expression), national origin, age, citizenship, marital status, mental or physical disability, genetic information (including family medical history), discharge status from the military, protected veteran status (which includes disabled veterans, recently separated veterans, active duty wartime or campaign badge veterans, and Armed Forces service medal veterans), or any other basis protected by law. GitLab will not tolerate discrimination or harassment based on any of these characteristics. See also GitLab’s EEO Policy and EEO is the Law. If you have a disability or special need that requires accommodation, please let us know during the recruiting process.
GitLab
From planning to production, bring teams together in one application. Ship secure code more efficiently to deliver value faster.
See more jobsSafe Remote Job Search Tips
Verify Employer Thoroughly
Research the company's identity thoroughly before applying. Check for a professional website with contacts, active social media, and LinkedIn profiles. Verify details across platforms and look for reviews on Glassdoor or Trustpilot to confirm legitimacy.
Never Pay to Get a Job
Legitimate employers never require payment for applications, training, background checks, or equipment. Always reject upfront payment requests or demands for bank details, even if they claim it's for purchasing necessary work gear on your behalf.
Safeguard Your Personal Information
Protect sensitive data like SSN, bank details, or ID copies. Share this only after accepting a formal, written job offer. Ensure it's submitted via a secure company system or portal, never through insecure channels like standard email attachments.
Scrutinize Communication & Interviews
Watch for communication red flags: poor grammar, generic emails (@gmail), vague details, or undue pressure. Be highly suspicious of interviews held only via text or chat apps; legitimate companies typically use video or phone calls.
Beware of Unrealistic Offers
If an offer's salary or benefits seem unrealistically high for the work involved, be cautious. Research standard pay for similar roles. Offers that appear 'too good to be true' are often scams designed to lure you into providing information or payment.
Insist on a Formal Contract
Always secure and review a formal, written job offer or employment contract before starting work or sharing final personal details. Ensure it clearly defines your role, compensation, key terms, and conditions to avoid misunderstandings or scams.