SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
BlueOptima is hiring a Senior Product Manager to own Code Insights, an application security product that helps engineering and security teams ship secure code faster by detecting exposed secrets, static analysis (SAST) vulnerabilities, and risky open-source dependencies (SCA) before production.
This is a high-agency role with direct visibility to the executive and C-suite team. You will set the AppSec point of view for Code Insights, defend it under pressure from CISOs and security architects in customer meetings, and present strategy, trade-offs, and results to leadership. You are expected to have a point of view and defend it both internally and externally—this is not an execution-only seat.
Key responsibilities include:
**Roadmap & Direction**: Set and defend the product roadmap for Code Insights (secrets detection, SAST, SCA/dependency risk) rooted in real AppSec domain expertise. Partner with engineering to ship high-quality releases and own trade-off calls when scope, timeline, and security depth conflict. Report product health and progress directly to senior leadership with judgment to communicate what leadership needs to hear.
**External & Internal Leadership**: Pitch Code Insights directly to CISOs, SecOps leads, and security architects; be comfortable being challenged on technical depth and defending the product's position against competing tools. Own customer pilots end to end, from technical validation through commercial conversion. Translate customer and prospect input into product decisions, and say no to requests that don't fit strategy. Represent the product internally to sales, marketing, and execs as the person who can explain why Code Insights wins and where it's catching up.
**Product-Led Growth**: Leverage Code Insights' shift-left, developer-first design (CLI, pre-commit hooks, CI/CD integration) to build organic, self-serve adoption. Partner with Design and Marketing to test and refine the self-serve journey from first scan to habitual use to internal champion. This is treated as a strategic growth opportunity to build into, not a prerequisite.
You will be accountable for concrete outcomes: shipping against a roadmap you've defined with key stakeholders, converting customer pilots to paid/renewed/expanded accounts, driving retention and commercial outcomes, and building organic growth motion if you lean into the PLG opportunity.
**Requirements:**
- 6–7+ years in product management or customer-facing technical role with real ownership of roadmap decisions, not just execution
- Security domain grounding: working knowledge of application security concepts (SAST, SCA, secrets detection, software supply chain security) sufficient to hold your own with security practitioners. Deep AppSec expertise is a strong plus; fast learner with adjacent technical credibility can also thrive
- Business and interpersonal range: MBA or equivalent business training paired with technical depth; ability to move fluently between engineering standups, CISO pitches, and exec updates. Strong written and verbal communication, executive presence, and judgment to push back when needed
- Commercial instinct: comfortable owning outcomes tied to revenue and retention, not just shipped features; think in terms of business impact
- PM fundamentals: track record managing roadmaps, backlog hygiene (Jira or equivalent), and clear stakeholder reporting
- Nice to have: prior exposure to PLG or self-serve growth motions (treated as growth opportunity, not screening filter)
