Senior Product Manager, Product Security

Litmus

. Own and drive the product security roadmap across Litmus Edge, Litmus Edge Manager, Litmus UNS, and related platform services .

Posted 10/27/2026full-timeSanta Clara • California • United StatesSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Demonstrates expertise in product security, vulnerability assessment, and secure software development, with a strong focus on integrating security practices into engineering processes. Proficient in managing security roadmaps, conducting security reviews, and collaborating with cross-functional teams to enhance product security.

Highest-signal resume keywords

Product Security Roadmap ManagementVulnerability Assessment and Penetration TestingLinux, Docker, Kubernetes, and Cloud InfrastructureApplication and API SecurityCompliance with ISO 27001 and SOC 2

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Vulnerability AssessmentPenetration TestingSecure Software DevelopmentThreat ModelingScripting and AutomationCode ReviewSecurity ArchitectureAI-Assisted Security ToolsCVE/CVSS FamiliarityContainer Hardening

Soft Skills

Strong Communication SkillsCollaboration with Technical TeamsIndependent Research Ability

Tools & Technologies

DockerKubernetesCloud InfrastructureTLSCertificate ManagementCI/CD SecuritySBOMSASTDASTMicroVM Technologies

Certifications & Qualifications

ISO 27001SOC 2IEC 62443

Industry Keywords

Product SecurityCybersecurityIndustrial IoTEdge ComputingOT SecurityZero-Trust ArchitectureEmbedded LinuxFirmware SecuritySecure BootEU Cyber Resilience Act

Tech Stack

Tools & technologies

CloudCyber SecurityDockerIoTKubernetesLinux

About the role

Key responsibilities & impact

Own and drive the product security roadmap across Litmus Edge, Litmus Edge Manager, Litmus UNS, and related platform services
Proactively identify security vulnerabilities, architectural weaknesses, and emerging threats
Track CVEs, security advisories, and open-source dependencies; prioritize remediation based on risk and product impact
Conduct hands-on vulnerability assessments, security investigations, and architecture reviews across applications, APIs, Linux systems, containers, and infrastructure
Reproduce vulnerabilities, investigate root causes, and validate fixes with Engineering
Review source code, configurations, and deployment architectures to identify security risks
Build scripts, proof-of-concepts, and automated tests to evaluate and validate security solutions
Work with Engineering to plan security improvements, prioritize releases, and balance immediate fixes with long-term investments
Research and evaluate emerging security technologies and architectures for industrial edge and enterprise environments
Design and validate secure, scalable deployment models across edge devices, virtual machines, containers, Kubernetes, and cloud infrastructure
Explore zero-trust principles, workload isolation, sandboxing, authentication, authorization, and secure communication
Evaluate security implications of AI-powered applications, autonomous agents, and edge AI workloads
Apply AI-assisted tools to vulnerability discovery, code analysis, security testing, and automation
Prototype new security approaches and translate research into product capabilities and roadmap initiatives
Partner with Engineering, DevOps, and QA to integrate security into product design, development, testing, and releases
Drive secure development practices, automated security testing, dependency management, and software supply chain security
Define security requirements for APIs, OAuth, RBAC, device management, remote access, and software updates
Coordinate product security incident response, vulnerability remediation, and security-related releases
Establish security review processes, technical guidelines, and measurable security objectives
Coordinate third-party penetration testing, security assessments, and product security audits; drive remediation of findings
Support compliance and certification initiatives including ISO 27001, SOC 2, IEC 62443, and the EU Cyber Resilience Act, as applicable
Collaborate with IT, DevOps, and leadership on security governance, access controls, and employee security awareness
Participate in enterprise customer security discussions, technical assessments, and security reviews
Translate customer security requirements into product features and roadmap priorities
Develop product security incident response procedures, vulnerability disclosure processes, and customer security communications
Establish proactive security ownership and a measurable security roadmap
Strengthen customer confidence through security assessments, technical engagement, and continuous product security improvements

Requirements

What you’ll need

7+ years of experience in software engineering, product security, cybersecurity, security architecture, or technical product management
Strong hands-on software engineering experience, including investigating vulnerabilities, reviewing code, and validating technical solutions
Experience defining technical product roadmaps and driving security initiatives with Engineering teams
Strong understanding of Linux, Docker, Kubernetes, networking, and cloud infrastructure
Practical knowledge of vulnerability assessment, penetration testing methodologies, threat modeling, and secure software development
Experience with application and API security, authentication, authorization, encryption, TLS, and certificate management
Familiarity with CVE/CVSS, open-source dependency security, and vulnerability management
Experience with AI-assisted development or security tools, scripting, and automation
Ability to independently research technologies, build prototypes, and collaborate on engineering implementations
Strong communication skills for engaging technical teams, leadership, and enterprise customers
Experience with industrial IoT, edge computing, OT security, or enterprise infrastructure software preferred
Knowledge of OPC UA and MQTT preferred
Experience with embedded Linux, firmware security, secure boot, and OTA updates preferred
Familiarity with zero-trust architecture, container hardening, virtualization, sandboxing, and microVM technologies preferred
Experience securing AI applications, autonomous agents, or edge AI workloads preferred
Knowledge of SBOM, SAST, DAST, CI/CD security, and software supply chain protection preferred
Familiarity with IEC 62443, NIST, ISO 27001, SOC 2, or the EU Cyber Resilience Act preferred
Experience supporting enterprise customer security reviews and technical assessments preferred
Ability to work from the Santa Clara, California or Toronto, Ontario office at least three days per week, or select No/Remote
No visa sponsorship is offered at this time

Benefits

Comp & perks

Growth-stage software company building infrastructure for industrial AI
Ownership, visibility, and ability to shape product and company trajectory
Work on systems used by real customers in production
Collaborative, curious, low-ego culture
Opportunity to work alongside experienced operators, engineers, and leaders
Direct impact on product and company trajectory