Sr Product Manager, Cyber/Email Security

Role Description

Our client is seeking a Sr. Product Manager, Cyber/Email Security to own their security product end-to-end, leading the expansion from awareness training into active threat detection and response. This hands-on individual contributor role focuses on threat triage, compromised-account containment, email security gateways, and back-office integrations. Built for the AI era, this position requires you to act as a strategic peer to leadership and use AI code-generation tools to personally build functional, high-fidelity prototypes that are 70–80% complete before handing them off to design and engineering.

What You Will Do

• Own the product direction for the security product, from validated problem statement through design, execution, and launch.
• Run customer discovery with district IT and security staff on a regular cadence, and turn what you hear into an evidence-backed roadmap for threat remediation, account-takeover protection, and email security.
• Build interactive prototypes, fast, with Claude and other AI prototyping tools, and hand them off 70 to 80% complete with the research, call recordings, and reasoning behind them, so design refines rather than reverse-engineers.
• Drive the expansion of CyberNut's detection and response capability: reported-threat workflows, auto-remediation, compromised-account containment, and email security gateway functionality.
• Drive prioritization with discipline. Say no to good ideas to protect great ones, and defend those calls with evidence when sales, customers, or leadership push.
• Write the problem statements and PRDs that carry work through our gated product process (intake, development readiness, prioritization, go/no-go, launch).
• Partner with engineering to stress-test feasibility, scope, and trade-offs, and dig into detection logic, data-model, integration, and reporting questions, knowing when an answer does not add up.
• Support enterprise and large-district deals: respond to security and compliance questionnaires, scope what is realistic, and feed real prospect needs back into the roadmap without letting a single deal hijack it.
• Define and track the metrics that tell you whether what you shipped actually reduced risk for customers.

Qualifications

• 5+ years in product management, with senior or lead-level ownership of a product or major area in CyberSecurity/Email Security B2B SaaS.
• Cybersecurity/Email Security SaaS experience: phishing, email security, threat remediation, account takeover, or detection and response. This is the core of the role.
• Demonstrated fluency with AI prototyping. You can show us working prototypes you have personally built with Claude or comparable AI tools. A portfolio of what you have made matters more than résumé bullet points.
• A track record of doing your own customer discovery, not outsourcing it.
• Enough technical fluency to reason about detection logic, data models, integrations, and reporting with engineers.
• Strong product judgment and the backbone to push back on stakeholders, including sales and executives, with evidence rather than opinion.
• The curiosity and speed to absorb the K-12 customer context: how districts buy, how thin their IT teams are, and what FERPA and state security reviews demand. Note that K-12 experience is NOT needed for this role and will not be a deciding factor.
• Clear, fast writing, and the temperament to thrive in a remote, fast-moving startup with little hand-holding.

Nice to Have

• Experience with email security gateway, secure email, or anti-phishing products at the detection-and-response layer.
• Experience shipping products with AI features embedded in them, including evaluating model output, handling hallucination and data-privacy risk, and knowing when AI is the wrong solution.
• Experience with integrations into mail platforms (Google Workspace, Microsoft 365) or back-office and identity tooling.
• Experience supporting enterprise sales motions and security review processes.
• B2B SaaS experience selling into education or public sector.