SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 238,000 - 357,000 / annual
1Password is seeking a Principal Product Manager, Security to shape security strategy across the company. You will serve as the bridge between Security Engineering (one of the industry's highest technical bars) and product teams building customer-facing features. The role combines deep technical credibility with product strategy leadership.
Key responsibilities include:
- Partner with product teams early to identify security requirements and threat-model implications before designs are locked
- Align Security Engineering with product strategy by translating feature-team needs into prioritized security work
- Own an independent security roadmap covering platform-level investments: key management, recovery, cryptographic foundations, authentication, and post-quantum cryptography readiness
- Lead security strategy for the AI era, defining how 1Password approaches agentic access to credentials and trust models for non-human identities
- Balance risk and usability using adoption, support, and telemetry data alongside threat models
- Represent 1Password to the security community through researcher engagement, bug bounty program participation, and conference speaking
- Coach product managers on security thinking and raise the bar for security-critical product work
You will work with Engineering, Design, Security Research, and GTM teams to ensure every product decision is grounded in verifiable security. At the Principal level, you set the standard for how product work gets done, coach teams, challenge assumptions constructively, and make the entire organization better.
1Password is a remote-first company with $400M+ ARR, on the Forbes Cloud 100 for four years running, and trusted by 180,000+ businesses including Fortune 100 leaders and AI companies. The company prioritizes collaboration, transparency, and technical depth. Travel for in-person engagement (offsites, team meetings, customer/industry events) is expected as part of the role.
REQUIREMENTS:
- 10+ years of product management experience, including significant time on security-critical products or platforms in a SaaS environment (or equivalent depth from security engineering/research backgrounds)
- Deep, demonstrable knowledge of security fundamentals: cryptography, authentication protocols, identity and access management, zero-knowledge and end-to-end encrypted system design, threat modeling
- Fluency in the credential and identity landscape, including passkeys, WebAuthn/FIDO, and relevant standards
- Track record of earning credibility with security engineering teams
- Ability to read and reason through technical specifications, security audits, and cryptographic design documents
- Experience making and defending risk-based tradeoffs with clear communication to engineers, executives, and customers
- History of shipping security features with strong user adoption, using friction and adoption data to improve them
- Experience setting strategy at platform or infrastructure level and influencing roadmaps without formal authority
- Communication that scales from security research papers to executive briefings without losing precision
- Strong point of view on security landscape shifts and ability to connect them to concrete roadmap decisions
STRONG PLUS:
- Standing in the security community (conference talks, publications, research, open-source, standards participation)
- Hands-on experience with AI security: agent identity/authorization, prompt injection, secrets management for automated systems
- Experience with compliance regimes (SOC 2, FedRAMP, FIPS)
- Background in vulnerability disclosure, incident response, or threat intelligence
- Experience running or working closely with bug bounty programs or researcher communities
