Product Manager: Security
BengaluruFull-timePosted 2mo ago
About the role
Product Manager responsible for CodeRabbit's security product, an AI-driven scanner for vulnerability hunting across codebases, including SAST, secrets detection, IaC checks, and supply-chain analysis. Focus on security judgment, detection quality, and collaboration with AppSec teams, CISOs, and sales.
Responsibilities
- Own the security product end to end: deep codebase scans, security findings in pull request reviews, and everything in between
- Decide which vulnerability classes, scanner capabilities, and languages to invest in next across SAST, secrets detection, infrastructure-as-code misconfiguration, and dependency and supply-chain analysis
- Define what good detection means as a product: the precision, recall, and noise bar a finding must clear before a customer sees it
- Own how findings are presented, triaged, and resolved: severity and exploitability grading, dismissal and feedback loops, remediation flows, and reporting
- Treat every false positive as a trust problem, not a tuning detail
- Turn detection-quality evidence into product decisions and customer-facing proof
- Own the AppSec and CISO persona alongside developers: what security teams need to evaluate, trust, and roll out the product
- Partner with Sales on enterprise security evaluations and competitive positioning
- Shape pricing and packaging of the security offering with Growth and Finance
- Work daily with engineers to align detection priorities with customer and market needs
- Own the quality bar for what ships: benchmark evidence and deliberate precision-vs-coverage decisions
Qualifications
- 5–8 years in the security space: product management at a security vendor, or hands-on security work (application security, penetration testing, vulnerability research, detection engineering) that you carried into product
- Product management experience with deeply technical products, ideally at a B2B SaaS or developer tools company
- Practical knowledge of real vulnerability classes and how they're exploited
- Knowledge of the security tooling landscape (SAST, DAST, secrets scanning, IaC, software composition analysis)
- Technically fluent; ability to read code and discuss APIs with engineers
- Strong written communication (PRDs and tickets)
- Comfort with ambiguity; able to move from fuzzy problem to clear spec
- Low ego, high ownership; outcome-focused
Skills
Required:Security product managementKnowledge of vulnerability classes and exploitabilitySAST/DAST, secrets scanning, IaC, SCAReading code and APIsCommunication (PRDs, tickets)
Benefits
- Competitive salary
- equity
- benefits
- Professional development opportunities
Last updated Aug 26, 2026. Interested? Apply on the company site.
About CodeRabbit
AI Code Reviews | CodeRabbit | Try for Free
The most advanced AI code reviews that catches 95%+ bugs. Free your devs to ship code faster.
AI Code ReviewsGitHubGitLabbrex-fastest-growing-2025codegit
More open roles at CodeRabbit
- Pooled Customer Success Manager4d agoSF | Boston · Customer Success
- Director, Enterprise Customer Success Management4d agoHybrid (San Francisco) · Customer Success
- Global Benefit Operations Manager4d agoSan Francisco · G&A
- Manager, Sales Compensation4d agoHybrid (San Francisco) · Finance
- Sr. Data Analyst (San Francisco)1w agoHybrid (San Francisco) · Revenue Operations