SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Salary: USD 225,250 - 265,000 / annual
Horizon3.ai is a fast-growing cybersecurity company building NodeZero, an autonomous penetration testing platform that helps organizations proactively identify and fix exploitable vulnerabilities before attackers exploit them. The platform is used by ITOps/SecOps teams, consulting pentesters, and managed security service providers across organizations of all sizes, from educational institutions to Global 100 enterprises.
You will lead the strategy and evolution of NodeZero Rapid Response, a capability that enables organizations to quickly understand whether emerging vulnerabilities create real, exploitable risk in their specific environments. This is a Staff Product Manager role requiring deep product leadership, cybersecurity expertise, threat intelligence experience, and technical depth.
Key responsibilities include:
**Product Strategy & Leadership**: Own the product vision, strategy, roadmap, and measurable outcomes for Rapid Response. Establish the end-to-end operating model from initial threat signal through research, prioritization, customer relevance analysis, exploit development, notification, remediation, and verification. Set clear ownership, decision rights, and operating rhythms across Attack Team, Engineering, Data, Design, Sales, Marketing, Customer Success, Channel, and Support.
**Exploit Intelligence & Coverage**: Build relationships with security vendors, researchers, and intelligence providers to identify emerging opportunities early. Define threat intelligence strategy across vendor advisories, CVEs, CISA KEV, public research, and exploit repositories. Develop prioritization frameworks for determining which vulnerabilities warrant immediate coverage based on exploitability, attacker utility, prevalence, customer footprint, and evidence of exploitation in the wild. Partner directly with vulnerability researchers and attack engineers to assess exploit prerequisites and validate exploitability in customer environments.
**Customer Relevance & Automation**: Build capabilities to identify which customers, environments, and assets are affected by emerging threats using asset intelligence, technology fingerprinting, and historical NodeZero data. Drive the product and Customer Success motion to ensure 100% of customers maintain current discovery data. Drive automation for exploit and test development, including AI-assisted analysis and production-safety checks. Define and monitor operational metrics such as time from disclosure to threat assessment, alert precision, validation coverage, and remediation rates.
**Adoption & Go-to-Market**: Track Rapid Response test rates by event, customer, segment, and technology. Own attach-rate analysis and define customer-level triggers for renewals and expansion. Partner with Alliances, Channel, and Marketing to create partner plays, enablement, and campaigns. Define the measurement funnel from threat event to awareness, notification, execution, remediation, pipeline influence, and retention.
**Cross-Functional Execution**: Own the quality of the Rapid Response user experience and reporting. Define how Rapid Response integrates into customer security operations through notifications, APIs, ticketing, SIEM/SOAR, and vulnerability management workflows. Partner with Sales, Marketing, Customer Success, Channel, and Support on launches, enablement, and feedback loops. Engage directly with CISOs, vulnerability management teams, SOC teams, and security researchers to understand workflows and unmet needs.
The role is hybrid and located in San Francisco, New York, or Washington DC, with up to 20% travel required.
**Requirements**:
- 7+ years of Product Management experience building deeply technical B2B SaaS products with significant cybersecurity experience and depth in vulnerability management, exposure management, offensive security, incident response, SOC operations, attack surface management, endpoint security, or threat detection and response.
- Threat intelligence experience required: hands-on experience working in or closely with cyber threat intelligence, vulnerability intelligence, threat research, or emerging-threat response.
- Strong technical understanding of the vulnerability and exploitation lifecycle, including CVEs, CISA KEV, vendor advisories, proof-of-concept exploits, affected products and versions, exploit prerequisites, mitigations, and remediation.
- Experience translating threat intelligence into actionable customer outcomes rather than simply presenting feeds or lists.
- Experience building products that combine multiple sources of telemetry, intelligence, and customer context to make high-confidence decisions.
- Strong product judgment and ability to make decisions quickly when information is incomplete and threats are evolving rapidly.
- Proven ability to work closely with engineers, designers, researchers, and security practitioners to translate complex technical capabilities into scalable product experiences.
- Strong communication, stakeholder-management, and data-driven decision-making skills with experience using customer feedback, threat data, product analytics, and operational metrics to prioritize investments.
