Staff Product Manager - Flashpoint

About Flashpoint

Flashpoint is the pioneering leader in threat data and intelligence. We empower commercial enterprises and government agencies to decisively confront complex security challenges, reduce risk, and improve operational resilience amid fast-evolving threats. Through the Flashpoint Ignite platform, we deliver unparalleled depth, breadth and speed of data from highly relevant sources, enriched by human insights.

Vulnerability data is in the middle of a reset. The way CVEs are scored, enriched and governed has shifted, the volume keeps climbing, and teams are drowning in findings. As the Staff Product Manager for Vulnerability Intelligence, you own that product line end to end: where it goes, how it is priced and packaged, and how it earns its place in customers' workflows.

This is a senior individual contributor seat with real strategic weight. You will carry the vulnerability roadmap, work directly with customers, and set the vulnerability AI strategy for the company.

What You Will Do

• Own the strategy, roadmap and commercial performance of the Vulnerability Intelligence product lines, including the migration of products from VulnDB to Ignite and the integrations that go with it.
• Define the vulnerability AI play: where agents and AI-driven workflows add real value on vulnerability data, and how to make customers want to buy it.
• Build on our newly launched attack surface management capability and decide how much deeper that integration goes.
• Make build, buy and partner calls across data sources, enrichment and delivery.
• Shape the API and MCP surface so customers and their tools can put our vulnerability data to work in SIEM, ticketing, vulnerability management and orchestration platforms.
• Be the technical answer of record on the product for sales, support and customers, and represent Flashpoint externally where it counts.
• Work daily with the engineering lead for the vulnerability team and with the analysts who lead vulnerability research.
• Turn a fast-changing vulnerability landscape into a clear point of view and a roadmap that responds to it.

What We Are Looking For

• Have owned a vulnerability product, or a vulnerability-adjacent one (vulnerability management, exposure management, vulnerability-focused threat intelligence).
• Are comfortable in the data behind the product: how CVEs are sourced, enriched and scored, how patches really work, and why prioritization matters.
• Pull your own data to answer product questions instead of waiting for a report.
• Talk to customers regularly and know how to turn a vague pain point into the right question and answer.
• Look at a feature request and see the long-term vision behind it, and say no when the vision calls for it.
• Use AI in your daily work and have strong opinions about where it helps and where it does not in security workflows.
• Can explain a technical tradeoff to an engineer, a customer CISO and a sales team in the same afternoon.
• Depth in the vulnerability domain: CVE governance, enrichment, exploitation signals and prioritization frameworks (e.g., NVD, KEV, EPSS, SSVC, CVSS v4).
• Ownership of a B2B SaaS revenue product line, with a record of shaping pricing, packaging and adoption.
• Familiarity with software supply chain concepts such as SBOM and VEX.