SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
BlueOptima is hiring a Senior Product Manager to own Code Insights, an application security product that helps engineering and security teams ship secure code faster by catching exposed secrets, static analysis (SAST) vulnerabilities, and risky open-source dependencies (SCA) before they reach production.
This is a high-agency role with direct visibility to the exec and C-suite team. You will set the AppSec point of view for Code Insights, defend it under pressure from CISOs and security architects in customer meetings, and present strategy, trade-offs, and results to leadership. You're expected to have a point of view and defend it both internally and externally—this isn't an execution-only seat.
Key responsibilities include:
**Roadmap & Direction**: Set and defend the product roadmap for Code Insights (secrets detection, SAST, SCA/dependency risk) rooted in real AppSec domain expertise. Partner with engineering to ship high-quality releases and own trade-off calls when scope, timeline, and security depth conflict. Report product health and progress directly to senior leadership with judgment to communicate what leadership needs to hear.
**External & Internal Presence**: Pitch Code Insights directly to CISOs, SecOps leads, and security architects; be comfortable being challenged on technical depth and defending against competing tools. Own customer pilots end-to-end from technical validation through commercial conversion. Translate customer and prospect input into product decisions, and say no to requests that don't fit strategy. Represent the product internally to sales, marketing, and execs as the person who can explain why Code Insights wins and where it's catching up.
**Product-Led Growth**: Use Code Insights' shift-left, developer-first design (CLI, pre-commit hooks, CI/CD integration) as a foundation to build organic, self-serve adoption. Partner with Design and Marketing to test and refine the self-serve journey from first scan to habitual use to internal champion. This is treated as a strategic growth opportunity to build into, not a prerequisite.
You'll have room to shape how Code Insights grows through product-led channels and build a self-serve growth motion as an upside opportunity on top of the core mandate. Success is tied directly to retention goals, so you're accountable for customers staying and growing alongside deals closing.
**Requirements:**
- 6–7+ years in product management or a customer-facing technical role, with real ownership of roadmap decisions, not just execution
- Security domain grounding: working knowledge of application security concepts (SAST, SCA, secrets detection, or software supply chain security) sufficient to hold your own with security practitioners. Deep AppSec expertise is a strong plus; a fast learner with adjacent technical credibility can also thrive
- Business and interpersonal range: actively seeking candidates with an MBA or equivalent business training paired with technical depth. Strong written and verbal communication, executive presence, and judgment to push back matter as much as domain knowledge
- Commercial instinct: comfortable owning outcomes tied to revenue and retention, not just shipped features; think in terms of business impact, not just backlog throughput
- PM fundamentals: track record managing roadmaps, backlog hygiene (Jira or equivalent), and clear stakeholder reporting
- Nice to have: prior exposure to PLG or self-serve growth motions (treated as an opportunity to grow into, not a screening filter)
