Vulnerability data is in the middle of a reset. The way CVEs are scored, enriched and governed has shifted, the volume keeps climbing, and teams are drowning in findings while still asking the same question: what do I fix first, and why? Flashpoint's Vulnerability Intelligence line is built to answer it, with analyst-curated coverage that reaches past the CVE list. As the Staff Product Manager for Vulnerability Intelligence, you own that product line end to end: where it goes, how it is priced and packaged, and how it earns its place in customers' workflows.
This is a senior individual contributor seat with real strategic weight. You will carry the vulnerability roadmap, work directly with customers, and set the vulnerability AI strategy for the company, alongside a series of AI modules that is about to launch. You will partner with an engineering lead, with Flashpoint's vulnerability analysts, and with a PM team that works as one group.
We have a role for you if, you- Have owned a vulnerability product, or a vulnerability-adjacent one (vulnerability management, exposure management, vulnerability-focused threat intelligence), in some shape or form
- Are comfortable in the data behind the product: how CVEs are sourced, enriched and scored, how patches really work, and why prioritization matters to the person who has to do the patching
- Pull your own data to answer product questions instead of waiting for a report
- Talk to customers regularly and know how to turn a vague pain point into the right question, and the right question into an answer
- Look at a feature request and see the long-term vision behind it, and say no when the vision calls for it
- Use AI in your daily work and have strong opinions about where it helps and where it does not in security workflows
- Like owning a product line where you shape the ecosystem around it, rather than operating inside one that is already defined
- Can explain a technical tradeoff to an engineer, a customer CISO and a sales team in the same afternoon
What you will get to do on our team:- Own the strategy, roadmap and commercial performance of the Vulnerability Intelligence product lines, including the migration of products from VulnDB to Ignite and the integrations that go with it
- Define the vulnerability AI play: where agents and AI-driven workflows add real value on vulnerability data, and how to make customers want to buy it
- Build on our newly launched attack surface management capability and decide how much deeper that integration goes
- Make build, buy and partner calls across data sources, enrichment and delivery
- Shape the API and MCP surface so customers and their tools can put our vulnerability data to work in SIEM, ticketing, vulnerability management and orchestration platforms
- Be the technical answer of record on the product for sales, support and customers, and represent Flashpoint externally where it counts
- Work daily with the engineering lead for the vulnerability team and with the analysts who lead vulnerability research, so product decisions stay grounded in what the data can actually support
- Turn a fast-changing vulnerability landscape (new governance models, new enrichment sources, new regulatory pressure) into a clear point of view and a roadmap that responds to it
What you will achieve:- Within 30 days:
- You are fluent in our vulnerability data and product lines, have met the engineering and analyst partners, and have spoken with a first set of customers.
- Within 60 days:
- You have a written view of where the vulnerability product line is strong and where it is exposed, and a draft of the roadmap and AI hypotheses to test.
- By 90 days:
- You have a roadmap the team believes in, a customer research rhythm in place, and a clear position on the vulnerability AI play.
To be successful in this role, you will need:- Depth in the vulnerability domain: you can speak credibly about CVE governance, enrichment, exploitation signals and prioritization frameworks (for example NVD, KEV, EPSS, SSVC, CVSS v4)
- Ownership of a B2B SaaS revenue product line, with a record of shaping pricing, packaging and adoption
- Fluency in data: comfortable querying, analyzing and presenting data to drive decisions
- Working knowledge of integrations and APIs, and of the platforms vulnerability data flows into (SIEM, ticketing, vulnerability management, ServiceNow)
- Familiarity with software supply chain concepts such as SBOM and VEX, and with how regulation is changing what customers ask for
- Strong customer discovery skills and the independence to set direction, not just carry out a backlog
Base pay range: $174,900/yr. to $215,000/yr. plus target bonus
