Principal Product Manager, Vulnerability Management

Principal Product Manager, Vulnerability Management

Location: Remote

Compensation: $140,000 - $223,000 per year, depending on experience and qualifications.
Employment Type: Full-Time

Clearance : Active security clearance or eligibility to obtain a U.S. security clearance. (Required)

Travel: Regular travel required (15-25%)

What you can expect as the Principal Product Manager, Vulnerability Management at Fortress...

Fortress Information Security is seeking a Principal Product Manager to lead strategy, execution, and growth for its Vulnerability Management product area. This role owns the product vision, roadmap, customer discovery, and delivery of capabilities that help organizations aggregate, correlate, prioritize, and remediate vulnerabilities across complex technology environments. The Principal Product Manager will work closely with engineering, design, customer success, sales, and executive stakeholders to translate customer needs into scalable product solutions. This individual will play a key role in shaping how automation and AI improve vulnerability prioritization, remediation workflows, and risk-based decision-making for critical infrastructure, defense contractors, federal agencies, and enterprise customers. Success in this role includes delivering measurable customer value, driving product adoption, influencing revenue growth, and improving vulnerability management outcomes through data-driven prioritization and automation.


Responsibilities Include:

• Define and execute the product strategy, vision, and roadmap for Fortress's Vulnerability Management capabilities.
• Lead customer discovery through interviews, workflow analysis, executive discussions, win/loss reviews, and market research to identify product opportunities and customer pain points.
• Translate customer and business needs into product requirements, PRDs, user stories, acceptance criteria, and roadmap priorities.
• Partner with engineering and design teams to deliver high-quality product capabilities aligned with customer needs and business objectives.
• Prioritize features and investments by balancing customer value, technical feasibility, compliance requirements, revenue impact, and strategic goals.
• Drive development of vulnerability aggregation, CVE correlation, exploitability analysis, risk prioritization, and remediation workflow capabilities.
• Define and evolve AI-assisted vulnerability management experiences, including automated triage, risk ranking, summarization, natural language interaction, and decision-support workflows.
• Collaborate with sales, customer success, and marketing teams to support product launches, customer engagements, demonstrations, and strategic opportunities.
• Serve as a subject matter expert during executive briefings, customer meetings, roadmap reviews, and strategic account discussions.
• Establish and monitor product success metrics, including adoption, engagement, customer outcomes, retention, workflow efficiency, and revenue influence.
• Evaluate competitive offerings, market trends, and emerging technologies within vulnerability management, cyber risk, OT security, SBOM analysis, software supply chain security, and third-party risk management.
• Ensure alignment between customer commitments, business priorities, engineering capacity, and product delivery timelines.
• Drive continuous improvement of product management practices, prioritization processes, and stakeholder communication.
• Other duties as assigned.

Minimum Qualifications:

• Active security clearance or eligibility to obtain a U.S. security clearance. (Required)
• 4+ years of cybersecurity experience
• 8+ years of product management, product ownership, or related experience in enterprise software, cybersecurity, risk management, infrastructure, or compliance
• Experience owning a product area, major platform capability, or strategic roadmap within a B2B SaaS or enterprise software environment.
• Strong understanding of vulnerability management workflows, including identification, prioritization, remediation, and risk assessment.
• Demonstrated ability to define product strategy and translate customer needs into measurable business outcomes.
• Experience developing product requirements, user stories, acceptance criteria, and roadmap plans.
• Strong cross-functional leadership skills with experience partnering across engineering, design, sales, customer success, marketing, and executive teams.
• Excellent communication and stakeholder management skills, including executive and customer-facing interactions.
• Ability to operate independently in a fast-paced environment with competing priorities and ambiguity.
• Experience building AI-enabled products.
• Hands-on experience designing or working with AI-native product capabilities - automated prioritization, LLM-assisted workflows, or intelligent risk scoring

Preferred Skills:

• Experience with vulnerability management, exposure management, security operations, SBOM, software supply chain security, or OT/ICS security.
• Familiarity with CVEs, CVSS, EPSS, KEV, exploit intelligence, asset criticality, remediation, and risk-scoring methodologies.
• Experience supporting federal, DoD, or highly regulated environments, including CMMC, RMF, FedRAMP, or related compliance frameworks.
• Prior experience working for a cybersecurity, supply chain security, vulnerability management, software provider.
• Experience supporting enterprise sales cycles, strategic customer engagements, executive briefings, and product-led growth initiatives.
• Familiarity with vulnerability intelligence sources, exploitability indicators, advisory databases, and prioritization frameworks.
• Experience mentoring junior product managers, product owners, analysts, or cross-functional team members.

Education:

• Bachelor's Degree or equivalent professional work experience required.

Employee Benefits:

• Remote and Hybrid working environment
• Competitive pay structure
• Medical, dental, vision plans with employees covered up to 90% with highly progressive options for dependents and families
• Company paid life, short- and long-term disability insurance
• Employee Assistance Program
• 401(k) match
• Flexible Paid Time Off
• Parental Leave

Employment Perks:

• We provide each employee with professional growth opportunities through succession planning, up-skilling, and certifications
• Tuition and certification reimbursement
• Employee Referral Programs
• Company Sponsored Events

Fortress is proud to be an Equal Opportunity Employer. All employees and applicants will receive consideration for employment without regard to age, color, disability, gender, national origin, race, religion, sexual orientation, gender identity, protected veteran status, or any other classification protected by federal, state, or local law. Fortress Information Security takes part in the E-Verify process for all new hires.


For positions located in the US, the following conditions apply. If you are made a conditional offer of employment, you will have to undergo a drug test. ADA Disclaimer: In developing this job description care was taken to include all competencies needed to successfully perform in this position. However, for Americans with Disabilities Act (ADA) purposes, the essential functions of the job may or may not have been described for purposes of ADA reasonable accommodation. All reasonable accommodation requests will be reviewed and evaluated on a case-by-case basis.


Pay Range: $140,000 - $223,000 per year