About the Role

We are looking for a Senior or Staff Product Manager to join our Proactive Offense product group. This team is responsible for every pentest operation type that makes NodeZero the most powerful proactive security platform on the market.

You will own one or more offensive product areas (e.g., External Pentesting) end-to-end: defining what NodeZero attacks, how it attacks, and how it communicates consequences and business risk to defenders. You will work directly with engineering managers and a world-class team of offensive security engineers to ship capabilities that emulate real attacker behavior.

This role is ideal for someone who is energized by the attacker's perspective, thrives in a fast-moving environment, and wants to shape how AI-powered offensive security evolves. You will join a product team that operates with high autonomy, moves fast, and has direct access to company leadership and customers.

What You'll Do

• Own the product roadmap for your offensive product area(s), from discovery through launch and iteration, balancing customer impact, technical feasibility, and business value
• Define attack capabilities in collaboration with offensive security engineers, translating attacker techniques (CVE exploitation, credential pilfering, lateral movement, privilege escalation) into product requirements
• Drive consequence-first thinking: ensure NodeZero doesn't just find vulnerabilities but demonstrates the blast radius and business impact of every attack path
• Partner with Engineering leadership to align priorities, manage trade-offs, and ship on aggressive timelines
• Engage directly with customers and prospects - including SecOps practitioners and CISOs - to deeply understand how they use NodeZero and where it needs to go next
• Collaborate cross-functionally with security research, sales engineering, marketing, and customer success to support launches, competitive positioning, and commercial deals
• Define and track success metrics around attack path coverage, op completion rates, time to first finding, and customer adoption
• Contribute to product strategy alongside the Sr. Manager of Proactive Offense and VP of Product, shaping how Horizon3.ai extends its autonomous offensive capabilities

What We're Looking For

• 5+ years of Product Management experience delivering technical SaaS products
• Deep interest in or experience with cybersecurity, offensive security, or penetration testing. You don't need to be a pentester, but you need to be able to think like one.
• Demonstrated ability to ship complex, technically deep features in collaboration with engineering teams that build systems, not just UIs
• Strong cross-functional leadership - you can drive alignment across engineering, security research, sales, and executive stakeholders without positional authority
• Customer obsession - you've spent real time with users, turned their pain into product decisions, and can articulate the "so what" of every capability
• Clear, concise communication - you can translate deeply technical concepts for business audiences and translate business objectives for engineers
• Comfort with ambiguity and speed - we are building a category; the roadmap changes, scope shifts, and the best PMs here thrive on that
• Experience in Agile environments with modern product management tooling

Preferred

• Background in cybersecurity, networking, cloud infrastructure, or adjacent technical domains
• Familiarity with offensive security concepts: attack chains, CVEs/CWEs, OWASP Top 10
• Experience building products for technical practitioners (security engineers, IT ops)
• Bachelor's degree in Computer Science, Engineering, or related field; advanced degree in engineering or business is a plus

Location:

• San Francisco Preferred, NYC, DC available - will be onsite 1 day a week

Travel Required

This job may require up to 25% of travel (customer visits, team offsites, conferences) within the assigned territory to be successful. Job-related travel expenses are reviewed and must be approved by your manager.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

Application Note

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.