Principal Product Manager - Identity Threat Detection & Response

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale. We are looking for a Principal Product Manager to guide the vision, strategy, and execution for Identity Threat Detection and Response (ITDR) within Elastic Security.

What You Will Be Doing

• Define and own the vision, strategy, and roadmap for a credible ITDR function within Elastic Security, evolving our Entity Analytics and Entity Store foundation from behavioral analytics into an identity-defense outcome.
• Manage the plan for non-human and AI agent identities in Elastic Security, modeling service accounts, workloads, secrets, and self-directed agents as important identities.
• Work with threat research and detection engineering, focusing on identity-specific threats such as credential access, privilege escalation, and identity-based lateral movement.
• Drive the response and containment strategy ('R' in ITDR) by turning detections into action using identity-system integrations and automated responses with human oversight.
• Collaborate closely with enterprise customers, security operations teams, sales, and solution architects to understand requirements and clarify product needs.
• Partner with the design team to develop investigation and response experiences, integrating identity signals with endpoint, cloud, and network data in the SIEM and XDR functions.
• Evangelize Elastic's identity capabilities through content such as blog posts, talks, and open community interaction.

What You Bring

• Extensive Experience: 10+ years of experience in product management or solution delivery for security products (SIEM, XDR, EDR, identity security, or detection and response).
• Identity Security Depth: Solid knowledge of identity-based attack techniques, the identity fabric (Active Directory, cloud identity providers, SSO, OAuth, privileged access), ITDR, and UEBA.
• Non-Human Identities: Fluency in service accounts, workloads, secrets, and AI agents, understanding how traditional human-identity rules differ for continuous autonomous systems.
• AI and ML Fluency: Deep technical comprehension of behavioral analytics, anomaly detection, LLMs, and agentic systems, comfortable working closely with data scientists.
• Bias to Action: Ability to advance fast, learn quickly from experiments, and utilize AI tools to accelerate decision-making.
• Management and Influence: Demonstrated ability to lead across a matrixed organization and drive execution in a dynamic, remote-first environment.
• Communication Excellence: Outstanding communication skills to distill complex technical concepts into compelling narratives.
• Customer Obsession: Commitment to solving real-world customer problems and advocating for security analysts and detection engineers.