Principal Product Manager: Location: Waterloo, Ontario - FULL TIME - ON-SITERole SummaryOpenText Fortify is seeking a mid-career Product Manager to lead key Dynamic Application Security Testing (DAST) capabilities across WebInspect, SC DAST, and Dynamic Security Research. This role owns product direction from discovery through delivery and adoption, partnering closely with engineering, security research, sales, marketing, and customers.
You will translate market needs and technical signals into clear roadmap priorities, shape differentiated security outcomes, and ensure our DAST portfolio delivers measurable customer value. Strong AI knowledge is required, including practical understanding of how AI can improve security testing efficacy, user workflows, and product competitiveness.
Your Impact:- Product strategy and execution for WebInspect, SC DAST, and Dynamic Security Research capabilities.
- End-to-end lifecycle management: discovery, requirements, prioritization, launch, and post-launch optimization.
- Cross-functional alignment among R&D, research teams, sales, marketing, support, and customer success.
- Customer and field engagement to gather insights, validate problems, and drive adoption outcomes.
- AI-enabled roadmap opportunities across DAST workflows, including prioritization of high-impact use cases.
What the role offers:- Define and maintain product roadmap, release priorities, and success metrics for assigned DAST areas.
- Partner with Dynamic Security Research and engineering to convert findings into product capabilities and user value.
- Write clear product requirements, user stories, and acceptance criteria with a strong focus on customer outcomes.
- Work with architecture and development teams on tradeoffs, feasibility, and delivery sequencing.
- Collaborate with sales and marketing on positioning, messaging, enablement, and launch readiness.
- Engage directly with customers and prospects for discovery interviews, roadmap validation, and feedback loops.
- Use quantitative and qualitative inputs to prioritize backlog and measure feature impact.
- Champion AI-driven enhancements (for example: intelligent crawl guidance, finding triage assistance, risk prioritization, and workflow automation) while ensuring responsible and trustworthy use.
- Monitor market and competitive trends in application security, DAST, and AI-enabled security tooling.
- Support GTM and customer-facing activities including briefings, webinars, and strategic account conversations.
What you need to succeed:- 4-8 years of product management experience, preferably in cybersecurity, AppSec, or enterprise software.
- Hands-on understanding of DAST concepts, web application security, and vulnerability management workflows.
- Proven ability to work effectively with both R&D/research and commercial teams (sales/marketing/customer success).
- Strong customer engagement skills with experience synthesizing feedback into product decisions.
- Demonstrated AI knowledge relevant to product strategy and execution, including practical use of AI in software products.
- Strong analytical skills and comfort using data to drive prioritization and measure results.
- Excellent written and verbal communication; able to influence across technical and non-technical stakeholders.
- Experience delivering products in Agile environments.
Preferred Qualifications- Experience with Fortify, WebInspect, SC DAST, or adjacent AppSec platforms.
- Background in vulnerability research, security testing tools, or DevSecOps workflows.
- Familiarity with enterprise buying cycles and security practitioner personas.
- Experience launching AI-assisted features in regulated or high-trust environments.
