Product Manager - SBOM

Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise-grade SBOM management, and the leading open source dependency management platform.

As a Product Manager, you’ll play a critical role in advancing the state of the art in open source security, helping teams build trust in every component they use.

What you will do

• Product Strategy & Leadership: Own the product roadmap, execute the overall strategy, and manage the business case (including product profitability) for a core part of Sonatype’s security portfolio.
• End-to-End Lifecycle Management: Oversee everything from writing high-level requirements and planning launches to managing in-life products, including customer feedback and issue resolution.
• Security & Domain Focus: Define and deliver capabilities that help organizations identify and prevent open-source malware and supply chain attacks at scale.
• Cross-Functional Collaboration: Partner closely with engineering, data science, design, and marketing to translate vision into impactful outcomes.
• Market & Customer Engagement: Collaborate with customers and industry experts to deeply understand developer workflows and the evolving threat landscape.
• Data-Driven Decision Making: Leverage data and user feedback to drive product adoption, ensure user satisfaction, and deliver measurable security improvements.

What you will bring

• Product & Platform Leadership: A proven track record of leading product strategy and delivery for complex SaaS or developer-facing platforms.
• Domain Expertise: Experience working within technical domains such as application security, DevSecOps, or developer tooling. Experience working with a software product company is considered a major plus.
• Years of Experience: 5+ years of experience in roles with exposure to the product development lifecycle and modern software development techniques.
• Education: A bachelor's degree in Computer Science or a related field is noted as helpful.
• Core Skills: Strong analytical skills (balancing customer insight, business value, and technical feasibility) along with outstanding verbal and written communication skills.

Why you should apply

• Global Scale and Impact: Shape technology that protects the open-source ecosystem at a global scale and influence how development teams defend against emerging security threats.
• Work with Industry Experts: Collaborate with some of the brightest minds in software supply chain security.
• Tackle Complex Technical Challenges: Solve complex technical problems and help build the future of secure software development.
• Join an Industry Leader: Work with a trusted pioneer relied upon by more than 2,000 organizations, including 70% of the Fortune 100.