Principal Product Manager - Identity Threat Detection & Response

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale. Used by more than 50% of the Fortune 500, the Elastic Search AI Platform brings together search precision and AI intelligence to accelerate results and deliver complete, cloud-based solutions for search, security, and observability.

About the Role

We are looking for a Principal Product Manager to guide the vision, strategy, and execution for Identity Threat Detection and Response (ITDR) within Elastic Security. Detecting and responding to identity-based attacks across on-premises, cloud, and agent environments is essential for modern Security Operations Centers (SOC).

In this role, you will define how Elastic detects, investigates, and responds to identity-based threats, building on our Entity Analytics and Entity Store foundation. You will also own the roadmap for securing non-human and AI agent identities within Elastic Security, working at the intersection of identity, detection engineering, and AI.

What You Will Be Doing

• Define and own the vision, strategy, and roadmap for ITDR within Elastic Security, evolving Entity Analytics and Entity Store from behavioral analytics into actionable identity defense.
• Manage the strategy for non-human and AI agent identities, modeling service accounts, workloads, secrets, and self-directed agents with dedicated behavior standards, ownership, and lifecycles.
• Collaborate with threat research and detection engineering on identity-specific threats, such as credential access, privilege escalation, lateral movement, and token abuse.
• Drive the response and containment strategy ('R' in ITDR) by converting detections into action via identity-system integrations and automated responses with appropriate human oversight.
• Partner with enterprise customers, SOC teams, sales, and solution architects to validate requirements and clarify product priorities.
• Work closely with design teams to integrate identity signals cleanly into analyst workflows across SIEM and XDR functions.
• Develop market expertise on identity security trends to shape unique product strategies and analyst relations.
• Evangelize Elastic's identity capabilities through blog posts, conference talks, and community engagement.

What You Bring

• 10+ years of product management or solution delivery experience in security products like SIEM, XDR, EDR, identity security, or detection and response.
• Deep identity security knowledge: Strong understanding of Active Directory, cloud IDPs, SSO, OAuth, PAM, ITDR, and UEBA across hybrid cloud environments.
• Non-human identity expertise: Familiarity with service accounts, workloads, secrets, and AI agents, and how non-human identities differ from traditional user identities.
• AI and ML fluency: Technical comprehension of behavioral analytics, anomaly detection, LLMs, and agentic systems.
• Bias to action: Ability to experiment rapidly and leverage AI tools to accelerate decision-making processes.
• Cross-functional leadership: Proven ability to align matrixed stakeholders and lead autonomously in a remote-first organization.
• Strong communication: Skill in distilling complex detection engineering and identity concepts into clear narratives for technical and executive audiences.
• Customer obsession: Passion for solving real-world defender challenges and partnering with SOC analysts.