Senior Product Manager, Product Security

Who is Litmus

Backed by leading investors and trusted by global manufacturers and partners like Google, Microsoft, Dell, Oracle, and Mitsubishi, Litmus is powering the shift toward software-defined manufacturing.

Why join Litmus

About the Role

Litmus is seeking a hands-on Senior Product Manager, Product Security to drive product security across Litmus Edge, Litmus Edge Manager, Litmus UNS, and related platform services.

This role combines product management, software engineering, cybersecurity, and AI expertise. You will own the product security roadmap, proactively identify vulnerabilities, collaborate with Engineering on remediation, and research secure, scalable architectures for current and future products.

We are looking for a technical product leader who can translate security challenges into product improvements while actively participating in technical investigations, prototyping, and security research.

Key Responsibilities

Product Security Strategy and Engineering

· Own and drive the product security roadmap across the Litmus product portfolio.

· Proactively identify security vulnerabilities, architectural weaknesses, and emerging threats.

· Track relevant CVEs, security advisories, and open-source dependencies. Prioritize remediation based on risk and product impact.

· Conduct hands-on vulnerability assessments, security investigations, and architecture reviews across applications, APIs, Linux systems, containers, and infrastructure.

· Reproduce vulnerabilities, investigate root causes, and validate fixes with Engineering.

· Review source code, configurations, and deployment architectures to identify security risks.

· Build scripts, proof-of-concepts, and automated tests to evaluate and validate security solutions.

· Work directly with Engineering to plan security improvements, prioritize releases, and balance immediate fixes with long-term investments.

Security Architecture, AI, and R&D

· Research and evaluate emerging security technologies and architectures for industrial edge and enterprise environments.

· Design and validate secure, scalable deployment models across edge devices, virtual machines, containers, Kubernetes, and cloud infrastructure.

· Explore zero-trust principles, workload isolation, sandboxing, authentication, authorization, and secure communication.

· Evaluate the security implications of AI-powered applications, autonomous agents, and edge AI workloads.

· Apply AI-assisted tools to vulnerability discovery, code analysis, security testing, and automation.

· Prototype new security approaches and translate research into product capabilities and roadmap initiatives.

· Anticipate future enterprise security requirements and proactively improve product architecture.

Secure Development and Cross-functional Collaboration

· Partner with Engineering, DevOps, and QA to integrate security into product design, development, testing, and releases.

· Drive secure development practices, automated security testing, dependency management, and software supply chain security.

· Define security requirements for APIs, OAuth, RBAC, device management, remote access, and software updates.

· Coordinate product security incident response, vulnerability remediation, and security-related releases.

· Establish security review processes, technical guidelines, and measurable security objectives.

Security Assessments, Compliance, and Customer Engagement

· Coordinate third-party penetration testing, security assessments, and product security audits. Drive remediation of findings.

· Support compliance and certification initiatives, including ISO 27001, SOC 2, IEC 62443, and the EU Cyber Resilience Act, as applicable.

· Collaborate with IT, DevOps, and leadership on security governance, access controls, and employee security awareness.

· Participate in enterprise customer security discussions, technical assessments, and security reviews.

· Translate customer security requirements into product features and roadmap priorities.

· Develop product security incident response procedures, vulnerability disclosure processes, and customer security communications.

Required Qualifications

· 7+ years of experience in software engineering, product security, cybersecurity, security architecture, or technical product management.

· Strong hands-on software engineering experience with the ability to investigate vulnerabilities, review code, and validate technical solutions.

· Experience defining technical product roadmaps and driving security initiatives with Engineering teams.

· Strong understanding of Linux, Docker, Kubernetes, networking, and cloud infrastructure.

· Practical knowledge of vulnerability assessment, penetration testing methodologies, threat modeling, and secure software development.

· Experience with application and API security, authentication, authorization, encryption, TLS, and certificate management.

· Familiarity with CVE/CVSS, open-source dependency security, and vulnerability management.

· Experience with AI-assisted development or security tools, scripting, and automation.

· Ability to independently research technologies, build prototypes, and collaborate on engineering implementations.

· Strong communication skills to engage technical teams, leadership, and enterprise customers.

Preferred Qualifications

· Experience with industrial IoT, edge computing, OT security, or enterprise infrastructure software.

· Knowledge of industrial protocols such as OPC UA and MQTT.

· Experience with embedded Linux, firmware security, secure boot, and OTA updates.

· Familiarity with zero-trust architecture, container hardening, virtualization, sandboxing, and microVM technologies.

· Experience securing AI applications, autonomous agents, or edge AI workloads.

· Knowledge of SBOM, SAST, DAST, CI/CD security, and software supply chain protection.

· Familiarity with IEC 62443, NIST, ISO 27001, SOC 2, or the EU Cyber Resilience Act.

· Experience supporting enterprise customer security reviews and technical assessments.

What Success Looks Like

· Establish proactive security ownership and a measurable security roadmap across Litmus products.

· Identify, prioritize, and drive remediation of vulnerabilities through close Engineering collaboration.

· Deliver practical improvements in security testing, automation, and secure development practices.

· Research and validate future security architectures and scalable deployment models.

· Strengthen customer confidence through security assessments, technical engagement, and continuous product security improvements.

The ideal candidate combines strategic product thinking with hands-on engineering, security research, and the ability to turn technical findings into secure, production-ready product capabilities.