Group Product Manager (Device & RASP)
- Level
- Lead
Not stated in the posting: salary, work type, visa.
Open. First seen 2 October 2026.
About the role
About Bureau
Bureau's standard text
Bureau is a unified risk decisioning platform for Compliance, Fraud, and Transaction risks. Our platform is a single decision-making engine, powered by a 1 billion+ identity knowledge graph. Over 150 Banks, fintechs, retailers, and digital platforms use Bureau to verify identities faster and stop fraud earlier globally.
Bureau has raised $50M+ from renowned Silicon Valley and global investors including Sorenson Capital and PayPal Ventures and is expanding rapidly from APAC to Americas, Europe, and beyond.
Bureau's standard text
Why Bureau?
Bureau is building the infrastructure that makes digital identities and transactions safe and trustworthy for billions of people. The mission is big, the problems are complex, and the impact is real.
We hire people who want that level of responsibility. People who move fast, build systems from scratch, and care deeply about turning strategy into execution. If you want predictability or narrow scope, this won't be your place. If you want to shape how a scaling global company operates—keep reading.
About the Role: Group Product Manager - Device & RASP
Bureau Device ID creates a persistent, privacy-centered identifier for every device and browser, resilient to factory resets, firmware changes, and incognito mode, with device graphs that expose fraud rings and 160+ signals for behavioral continuity.
Bureau RASP protects the app from the inside, where sophisticated mobile fraud actually executes. Four Zero Trust layers cover application integrity, runtime and environment threats, network channel protection, and per-threat enforcement, configurable without code changes.
As Group Product Manager, you will own both products as a single portfolio: strategy, roadmap, detection efficacy, packaging, and the PM team that builds them.
What you’ll be doing
- Own portfolio strategy for Device Intelligence and Runtime Security, including where the two products converge on a shared SDK, signal set, and enforcement model
- Treat detection efficacy as a product metric, own catch rate, false positive rate, and fingerprint persistence, with labelled datasets, adversarial testing, and regression gates before every release
- Run quarterly planning across Android, iOS, web, backend, and other relevant stakeholders.
- Hold the line on client-side constraints: SDK size, runtime overhead, crash-free rate, OS compatibility, upgrade adoption, and RASP's under-two-minute no-code integration
- Own the privacy posture of device identification — signal minimisation, consent, retention, GDPR/DPDP, and App Store and Play policy, and defend it in customer security reviews
- Own pricing and packaging, standalone and bundled, plus portfolio revenue, adoption, and gross retention
- Equip the field with the demo, POC playbook, and competitive bake-off kit; join strategic deals and escalations
What You’ll Bring
- 6-10 years in product management owning a multi-product portfolio
- Depth in fraud and risk, identity, device intelligence, mobile application security, or anti-abuse, with genuine familiarity with attacker techniques
- Experience shipping an SDK or client-side product, and an understanding of why mobile is unforgiving: OS fragmentation, store review, release trains you don't control
- Fluency in detection trade-offs, precision and recall, threshold selection, drift, label quality, and the judgment to spot a weak evaluation
- Technical literacy to read an architecture document, query the data yourself, and hold your own with a security researcher
- Enterprise B2B instincts: security and risk buyers, procurement, vendor security reviews, and POCs that convert
- Exceptional written communication
Bureau's standard text
Our Culture
- We hire self-motivated people and get out of their way
- We value performance, not hours worked
- Speed, ownership, and impact matter most
Compensation
- Competitive salary + potential equity
- Health benefits, flexible PTO, learning budget
What this role asks for
Particular to this role
Embedded Systems · Zero Trust
Rare in Bureau's other 12 open postings.
73% of this description is written for the role. The rest is Bureau's standard text, folded away below.
Read against Bureau's other open postings on this site.
The team: Product HIRES STEADILY
This role is one of 3 open in Product. 2 were posted in the last 30 days and the oldest in July: a team that hires all year rather than one being built.
WHAT THE TEAM WORKS WITH, ACROSS ITS POSTINGS
Android (2 of 3), iOS (2 of 3), Zero Trust (2 of 3)
OTHER ROLES ON THIS TEAM
- Product Analyst Intern posted Oct 8
- Product Manager (RASP) posted Oct 7
From the team and dates on Bureau's own job board.
Similar jobs
- Software Development Engineer in Test, SASE at Netskope
Shares 2 skills: Zero Trust, Android · same city - Senior DevOps Engineer at ZainTECH
Shares 2 skills: Zero Trust, Embedded Systems · same country - Senior Solution Architect - United States at JumpCloud
Shares 3 skills: Zero Trust, iOS, Android · Lead level - Cyber Security Liaison/Information Security Analyst - 304665 at Delaware Nation Industries
Shares 2 skills: Zero Trust, Embedded Systems - IT Support Engineer at Anthropic
Shares 3 skills: Zero Trust, iOS, Android · ✓ Visa sponsorship - Associate Data Scientist at Bureau
Also at this company
Is this your posting and you want it taken down? Email info@careerholo.com.