← All roles

Principal Product Manager - Identity Threat Detection & Response

Elastic· Security - Cross Team
Apply on company site
Hybrid (Ireland)€104.8k - €165.7kfull-timePosted 2mo ago

About the role

Principal Product Manager responsible for vision, strategy, and execution of Identity Threat Detection and Response (ITDR) within Elastic Security, focusing on identity-based threats across on-premises, cloud, and AI/non-human identities, and driving integration with SIEM/XDR.

Responsibilities

  • Define and own the vision, strategy, and roadmap for a credible ITDR function within Elastic Security, evolving Entity Analytics and Entity Store from behavioral analytics into identity-defense outcomes.
  • Manage the plan for non-human and AI agent identities in Elastic Security, modeling service accounts, workloads, secrets, and self-directed agents with lifecycle management and machine-scale detection.
  • Collaborate with threat research and detection engineering focusing on identity-specific threats (credential access, privilege escalation, identity-based lateral movement, abuse of identity providers/tokens).
  • Drive the response and containment strategy (R in ITDR), turning detections into automated/internal responses with human oversight for key actions.
  • Work closely with enterprise customers to understand requirements, discuss priorities, and clarify product needs with security operations teams, sales, and solution architects.
  • Partner with design to develop investigation and response experiences emphasizing identity in analyst workflows, integrating signals with endpoint, cloud, and network data in SIEM/XDR.
  • Gain knowledge of identity-security market trends to develop a unique strategy and engage analysts.
  • Be the product expert and evangelize Elastic’s identity capabilities via content (blogs, talks, communities).

Qualifications

  • 10+ years in product management or solution delivery for security products (SIEM, XDR, EDR, identity security, or detection and response).
  • Solid knowledge of identity-based attack techniques and the identity fabric (Active Directory, cloud identity providers, SSO, OAuth, privileged access) in on-prem and cloud environments. Familiarity with ITDR and UEBA.
  • Fluency in non-human identities (service accounts, workloads, secrets, AI agents) and understanding why human-identity rules don’t apply.
  • AI/ML fluency in behavioral analytics, anomaly detection, LLMs, and agentic systems; ability to work with data scientists and engineers; treat AI agents as both secured subjects and consumers of identity context.
  • Bias to action, ability to iterate quickly, leverage AI tools to accelerate decisions.
  • Experience leading across a matrixed organization in a remote-first environment; ability to drive execution at principal level.
  • Excellent written and spoken communication; ability to distill complex concepts for technical and non-technical audiences, including executives.
  • Customer obsession: strong focus on customer problems and defender-centric product development.

Skills

Required:Identity-security knowledgeNon-human identity managementAI/ML in security

Benefits

  • - Competitive pay based on work performed
  • - Health coverage for employee and family in many locations
  • - Flexible locations and schedules for many roles
  • - Generous vacation days
  • - Matching donations up to $2000 (local currency equivalent)
  • - Up to 40 hours/year for volunteer projects
  • - Minimum 16 weeks parental leave
Last updated Oct 15, 2026. Interested? Apply on the company site.
Elastic logo

About Elastic

The open source platform that powers search, observability, security, and more ...

Power insights and outcomes with The Elastic Search AI Platform. See into your data and find answers that matter with enterprise solutions designed to help you accelerate time to insight.

searchobservabilitysecurityAIenterprise solutionsvector database
Company profileWebsite

More open roles at Elastic