Staff Product Manager

Flashpoint is hiring a Staff Product Manager for Vulnerability Intelligence to own the product line’s strategy, roadmap, and commercial performance. The role shapes the vulnerability AI strategy, guides integrations and product decisions, and works closely with customers, engineering, analysts, sales, and support.

Responsibilities:

• Own the strategy, roadmap and commercial performance of the Vulnerability Intelligence product lines, including the migration of products from VulnDB to Ignite and the integrations that go with it
• Define the vulnerability AI play: where agents and AI-driven workflows add real value on vulnerability data, and how to make customers want to buy it
• Build on our newly launched attack surface management capability and decide how much deeper that integration goes
• Make build, buy and partner calls across data sources, enrichment and delivery
• Shape the API and MCP surface so customers and their tools can put our vulnerability data to work in SIEM, ticketing, vulnerability management and orchestration platforms
• Be the technical answer of record on the product for sales, support and customers, and represent Flashpoint externally where it counts
• Work daily with the engineering lead for the vulnerability team and with the analysts who lead vulnerability research, so product decisions stay grounded in what the data can actually support
• Turn a fast-changing vulnerability landscape (new governance models, new enrichment sources, new regulatory pressure) into a clear point of view and a roadmap that responds to it

Requirements:

• Have owned a vulnerability product, or a vulnerability-adjacent one (vulnerability management, exposure management, vulnerability-focused threat intelligence), in some shape or form
• Are comfortable in the data behind the product: how CVEs are sourced, enriched and scored, how patches really work, and why prioritization matters to the person who has to do the patching
• Pull your own data to answer product questions instead of waiting for a report
• Talk to customers regularly and know how to turn a vague pain point into the right question, and the right question into an answer
• Look at a feature request and see the long-term vision behind it, and say no when the vision calls for it
• Use AI in your daily work and have strong opinions about where it helps and where it does not in security workflows
• Like owning a product line where you shape the ecosystem around it, rather than operating inside one that is already defined
• Can explain a technical tradeoff to an engineer, a customer CISO and a sales team in the same afternoon
• Depth in the vulnerability domain: you can speak credibly about CVE governance, enrichment, exploitation signals and prioritization frameworks (for example NVD, KEV, EPSS, SSVC, CVSS v4)
• Ownership of a B2B SaaS revenue product line, with a record of shaping pricing, packaging and adoption
• Fluency in data: comfortable querying, analyzing and presenting data to drive decisions
• Working knowledge of integrations and APIs, and of the platforms vulnerability data flows into (SIEM, ticketing, vulnerability management, ServiceNow)
• Familiarity with software supply chain concepts such as SBOM and VEX, and with how regulation is changing what customers ask for
• Strong customer discovery skills and the independence to set direction, not just carry out a backlog