Senior Product Manager, Product Security

Posted 17d agochecked 1d ago

Pay
Not stated
Location
Santa Clara, California
Work mode
Hybrid
Level
Manager
Job type
Full-time
Posted
17d ago

About the role

WHO IS LITMUS Litmus is building the data foundation that powers industrial AI. AI doesn’t work without real-world, contextualized data - Litmus makes that data usable. As AI adoption accelerates, most industrial environments still can’t access or use their operational data. We solve that gap. We’re a growth-stage software company helping manufacturers access, structure, and use real-time data from machines, systems, and sensors at the edge. Our platform sits at the intersection of edge computing, AI, and industrial operations, enabling some of the world’s largest companies to run operations in real time, reduce downtime, and optimize production. Backed by leading investors and trusted by global manufacturers and partners like Google, Microsoft, Dell, Oracle, and Mitsubishi, Litmus is powering the shift toward software-defined manufacturing. WHY JOIN LITMUS BUILD THE INFRASTRUCTURE THAT MAKES INDUSTRIAL AI POSSIBLE AI is moving beyond the cloud and into the physical world. At Litmus, you’ll build the infrastructure that enables real-time data to power AI and machine learning systems in production environments. WORK ON PROBLEMS WHERE SOFTWARE MEETS THE REAL WORLD Most AI systems fail without access to real-world data. You’ll build the layer that makes them viable in production. We solve challenges at the intersection of distributed systems, real-time data, and industrial constraints — where reliability, scale, and performance are non-negotiable. HAVE REAL IMPACT, FAST You’ll work on systems used by real customers in production, with direct impact on product and company trajectory. As a scaling company, we move quickly. You’ll have ownership, visibility, and the ability to shape both product and company as we scale. JOIN A HIGH-PERFORMANCE TEAM We’re building a team that holds a high bar and pushes each other to improve. You’ll work alongside experienced operators, engineers, and leaders who have done this before and are building again at scale. We hire people who take ownership, move quickly, and care about outcomes. No passengers. OUR CULTURE At Litmus, the team is collaborative, curious, and low ego. People are scrappy, take ownership, and look for ways to make an impact. We value empathy just as much as execution, whether that’s in how we build, how we communicate, or how we support each other. We’re a growing company, so things move quickly and not everything is perfectly defined. If you enjoy figuring things out, working closely with others, and making steady progress, you’ll do well here. ABOUT THE ROLE Litmus is seeking a hands-on Senior Product Manager, Product Security to drive product security across Litmus Edge, Litmus Edge Manager, Litmus UNS, and related platform services. This role combines product management, software engineering, cybersecurity, and AI expertise. You will own the product security roadmap, proactively identify vulnerabilities, collaborate with Engineering on remediation, and research secure, scalable architectures for current and future products. We are looking for a technical product leader who can translate security challenges into product improvements while actively participating in technical investigations, prototyping, and security research. WHAT YOU’LL DO PRODUCT SECURITY STRATEGY AND ENGINEERING - Own and drive the product security roadmap across the Litmus product portfolio - Proactively identify security vulnerabilities, architectural weaknesses, and emerging threats - Track relevant CVEs, security advisories, and open-source dependencies. Prioritize remediation based on risk and product impact - Conduct hands-on vulnerability assessments, security investigations, and architecture reviews across applications, APIs, Linux systems, containers, and infrastructure - Reproduce vulnerabilities, investigate root causes, and validate fixes with Engineering - Review source code, configurations, and deployment architectures to identify security risks - Build scripts, proof-of-concepts, and automated tests to evaluate and validate security solutions - Work directly with Engineering to plan security improvements, prioritize releases, and balance immediate fixes with long-term investments SECURITY ARCHITECTURE, AI, AND R&D - Research and evaluate emerging security technologies and architectures for industrial edge and enterprise environments - Design and validate secure, scalable deployment models across edge devices, virtual machines, containers, Kubernetes, and cloud infrastructure - Explore zero-trust principles, workload isolation, sandboxing, authentication, authorization, and secure communication - Evaluate the security implications of AI-powered applications, autonomous agents, and edge AI workloads - Apply AI-assisted tools to vulnerability discovery, code analysis, security testing, and automation - Prototype new security approaches and translate research into product capabilities and roadmap initiatives - Anticipate future enterprise security requirements and proactively improve product architecture SECURE DEVELOPMENT AND CROSS-FUNCTIONAL COLLABORATION - Partner with Engineering, DevOps, and QA to integrate security into product design, development, testing, and releases - Drive secure development practices, automated security testing, dependency management, and software supply chain security - Define security requirements for APIs, OAuth, RBAC, device management, remote access, and software updates - Coordinate product security incident response, vulnerability remediation, and security-related releases - Establish security review processes, technical guidelines, and measurable security objectives SECURITY ASSESSMENTS, COMPLIANCE, AND CUSTOMER ENGAGEMENT - Coordinate third-party penetration testing, security assessments, and product security audits. Drive remediation of findings - Support compliance and certification initiatives, including ISO 27001, SOC 2, IEC 62443, and the EU Cyber Resilience Act, as applicable - Collaborate with IT, DevOps, and leadership on security governance, access controls, and employee security awareness - Participate in enterprise customer security discussions, technical assessments, and security reviews - Translate customer security requirements into product features and roadmap priorities - Develop product security incident response procedures, vulnerability disclosure processes, and customer security communications WHAT YOU’LL BRING MUST HAVE - 7+ years of experience in software engineering, product security, cybersecurity, security architecture, or technical product management - Strong hands-on software engineering experience with the ability to investigate vulnerabilities, review code, and validate technical solutions - Experience defining technical product roadmaps and driving security initiatives with Engineering teams - Strong understanding of Linux, Docker, Kubernetes, networking, and cloud infrastructure - Practical knowledge of vulnerability assessment, penetration testing methodologies, threat modeling, and secure software development - Experience with application and API security, authentication, authorization, encryption, TLS, and certificate management - Familiarity with CVE/CVSS, open-source dependency security, and vulnerability management - Experience with AI-assisted development or security tools, scripting, and automation - Ability to independently research technologies, build prototypes, and collaborate on engineering implementations - Strong communication skills to engage technical teams, leadership, and enterprise customers NICE TO HAVE - Experience with industrial IoT, edge computing, OT security, or enterprise infrastructure software - Knowledge of industrial protocols such as OPC UA and MQTT - Experience with embedded Linux, firmware security, secure boot, and OTA updates - Familiarity with zero-trust architecture, container hardening, virtualization, sandboxing, and microVM technologies - Experience securing AI applications, autonomous agents, or edge AI workloads - Knowledge of SBOM, SAST, DAST, CI/CD security, and software supply chain protection - Familiarity with IEC 62443, NIST, ISO 27001, SOC 2, or the EU Cyber Resilience Act - Experience supporting enterprise customer security reviews and technical assessments WHAT SUCCESS LOOKS LIKE - Establish proactive security ownership and a measurable security roadmap across Litmus products - Identify, prioritize, and drive remediation of vulnerabilities through close Engineering collaboration - Deliver practical improvements in security testing, automation, and secure development practices - Research and validate future security architectures and scalable deployment models - Strengthen customer confidence through security assessments, technical engagement, and continuous product security improvements The ideal candidate combines strategic product thinking with hands-on engineering, security research, and the ability to turn technical findings into secure, production-ready product capabilities.   Litmus Automation is an equal opportunity employer, committed to fostering an inclusive and diverse workplace. We believe diverse perspectives lead to innovation.

via Ashby

Skills

  • Streaming Data
  • Machine Learning
  • Distributed Systems
  • Product Management
  • Wireframing
  • Linux
  • Docker
  • Kubernetes
  • Network Security
  • Stakeholder Management
  • OAuth
  • Identity and Access Management
  • Incident Response
  • Security Auditing

About Litmus

Everything else Litmus has open, where they are hiring and what those postings say they pay.

Litmus on hyr
Website
litmus.io
This role is in
Santa Clara, California

More at Litmus

All roles
Apply

We’d like to use analytics to improve hyr. Your job search data is never included. Cookie policy