Senior Product Manager, Secret Detection and Vulnerability Research
United States of America
full time
Remote
senior
H1B: yes
GitLab Senior Product Manager at GitLab owning Secret Detection and Vulnerability Research products. Responsible for detection precision, customer impact, and driving adoption, retention, and revenue targets.
Responsibilities
This is an outcome-owning role - you will carry adoption, retention, and revenue targets for your area and be expected to explain how your roadmap moves them.
Some examples of our projects:
Push protection and pre-receive blocking that stops a credential before it reaches a repository, without wrecking developer flow
Secret validity checking and automated revocation partnerships with major cloud and SaaS token issuers
Detection content pipelines that turn threat research into shipped rules, with precision and recall tracked per rule
Intelligence-driven detection of malicious packages, dependencies, and references entering the software supply chain
Own the business outcomes for Secret Detection and Vulnerability Research, including adoption, expansion, competitive win rate, and revenue contribution. Bring a point of view on packaging and pricing, not just features.
Set the strategy for the full secret lifecycle: prevention, detection, validation, revocation, and reporting across GitLab.com, Dedicated, and Self-Managed.
Treat detection content as a product. Define how rules, advisories, and intelligence feeds are sourced, validated, versioned, and measured, and make quality visible to customers.
Hold the line on detection quality. False positives are a product defect and you will own the metrics that prove precision is improving.
Work at the level of the technology. Read the rule syntax, question the entropy heuristics, understand why a scanner missed something, and challenge engineering with informed alternatives.
Use AI to compress the distance between question and answer. Pull your own data, prototype your own flows, synthesize research and competitive input yourself, and bring conclusions rather than requests for someone else to investigate.
