← All roles

Principal Product Manager - Identity Threat Detection & Response

Elastic· Security - Cross Team
Apply on company site
Hybrid (Spain)€80.4k - €127.2kfull-timePosted 2mo ago

About the role

Lead vision, strategy, and execution for Identity Threat Detection and Response (ITDR) within Elastic Security, focusing on identity-based threats across on-premises, cloud, and AI/self-directed agents; own roadmap for non-human and AI agent identities; collaborate with threat researchers, data scientists, engineers, and customers to deliver a differentiated ITDR product.

Responsibilities

  • Define and own the vision, strategy, and roadmap for a credible ITDR function within Elastic Security, evolving Entity Analytics and Entity Store from behavioral analytics into identity-defense outcomes.
  • Manage the plan for non-human and AI agent identities in Elastic Security, modeling service accounts, workloads, secrets, and self-directed agents with distinct behavior standards, ownership, and lifecycle.
  • Work with threat research and detection engineering on identity-specific threats (credential access, privilege escalation, identity-based lateral movement, abuse of identity providers/tokens).
  • Drive the response and containment strategy (the 'R' in ITDR), turning detections into action with identity-system integrations and automated responses, with human oversight for important actions.
  • Collaborate with enterprise customers, security operations, sales, and solution architects to understand identity attack requirements and priorities.
  • Partner with design to develop investigation and response experiences focused on identity, integrating identity signals with endpoint, cloud, and network data in SIEM/XDR.
  • Gain deep knowledge of the identity-security market to develop a unique strategy and engage with analysts.
  • Be the product expert and evangelize Elastic's identity capabilities through content (blogs, talks, community interactions).

Qualifications

  • 10+ years in product management or solution delivery for security products (SIEM, XDR, EDR, identity security, or detection and response).
  • Solid knowledge of identity-based attack techniques and identity fabric (Active Directory, cloud identity providers, SSO, OAuth, privileged access) in on-prem and cloud environments; familiarity with ITDR and UEBA.
  • Fluency with non-human identities (service accounts, workloads, secrets, AI agents) and understanding why traditional human-identity rules don’t apply.
  • Deep technical understanding of AI/ML (behavioral analytics, anomaly detection, LLMs, agentic systems); ability to work with data scientists and engineers; secure AI agents.
  • Bias to action with ability to experiment and accelerate decisions, leveraging AI tools.
  • Experience leading across a matrixed, remote-first organization; autonomous, judgment-driven leadership at principal level.
  • Excellent written and spoken communication; ability to translate complex concepts for technical and non-technical audiences, including executives.
  • Customer obsession with industry trends and solving real-world defender problems; advocate for security analysts and detection engineers.

Skills

Required:Identity-based attack techniquesActive Directory and cloud identity providersNon-human identities (service accounts, workloads, secrets, AI agents)AI/ML in security (behavioral analytics, anomaly detection, LLMs, agentic systems)Product leadership and cross-functional collaborationCommunication and storytelling

Benefits

  • Competitive pay
  • Health coverage for you and your family in many locations
  • Flexible locations and schedules
  • Generous vacation days
  • Company matches up to $2000 for donations and service
  • Up to 40 hours/year for volunteer projects
  • Minimum 16 weeks parental leave
Last updated Oct 15, 2026. Interested? Apply on the company site.
Elastic logo

About Elastic

The open source platform that powers search, observability, security, and more ...

Power insights and outcomes with The Elastic Search AI Platform. See into your data and find answers that matter with enterprise solutions designed to help you accelerate time to insight.

searchobservabilitysecurityAIenterprise solutionsvector database
Company profileWebsite

More open roles at Elastic