Principal Product Manager, Cloud Security (CNAPP)

TrendAI is seeking a Principal Product Manager to lead the strategy and productization of its cloud-native application protection platform (CNAPP). The role shapes an integrated cloud security roadmap, partners with R&D to deliver solutions, embeds AI capabilities, and works with customers and field teams on feedback, enablement, and go-to-market.

Responsibilities:

• Own the strategy and roadmap for the cloud security portfolio, defining a prioritized, outcome-driven plan
• Synthesize customer requirements, field feedback, competitive intelligence, and market trends into a coherent strategic roadmap
• Decide which capabilities to build, extend, integrate, or partner on, and sequence delivery based on customer need, business impact, and technical feasibility
• Identify and drive opportunities to embed AI and generative AI into the product — such as AI-assisted detection, investigation, remediation, and analyst productivity — as a core part of the roadmap
• Use AI tools to accelerate product work, including research, requirements, competitive analysis, prototyping, and decision-making
• Co-work with the R&D team from planning through design and implementation to deliver high-quality, scalable cloud security solutions
• Apply strong cloud expertise in architecture and design reviews to guide technically sound, cloud-native product decisions
• Own the “what” and “why”: author clear product requirements, user stories, and acceptance criteria, and make timely trade-off decisions during development
• Maintain a healthy backlog, participate in agile ceremonies, and remove ambiguity so engineering can move quickly
• Collaborate effectively with globally distributed R&D teams across multiple time zones
• Co-work with the field — sales, solution engineering, and customer success — to deliver enablement, messaging, demos, and competitive positioning
• Establish repeatable channels to collect, structure, and prioritize field and customer feedback, and feed it back into the roadmap
• Partner with product marketing on launches, pricing and packaging input, and adoption programs
• Meet with executive stakeholders — cloud security directors, CISOs, and CTOs — to understand strategic priorities, risk posture, and buying criteria
• Engage hands-on cloud, platform, DevOps, and security engineering teams to capture detailed requirements and validate solutions
• Represent the product strategy clearly to executives, customers, partners, analysts, and both technical and non-technical stakeholders
• Participate in customer advisory boards, briefings, pilots, and industry events to shape and communicate the roadmap
• Define why each capability matters, which customer problem it solves, and how it should be positioned and sold
• Develop positioning, competitive analysis, customer presentations, solution briefs, and demonstrations
• Ensure every capability creates clear, measurable value for the customer and the business
• Use customer demand, product usage, adoption, technical feasibility, competitive intelligence, and pipeline impact to prioritize investment
• Measure success through customer adoption, risk reduction, influenced pipeline, and reusable platform capability

Requirements:

• Strong cloud expertise and strong AI fluency are both mandatory
• The ideal candidate brings deep, hands-on cloud experience from both a technical and a product management perspective, and a proven ability to co-work with the R&D team to deliver cloud-related solutions
• Equally important, this person must be fluent in AI, using AI tools to work faster and smarter, and shaping how AI and generative AI are embedded into our cloud security products
• Strong, hands-on cloud expertise is mandatory — deep working knowledge of AWS, Microsoft Azure, and/or Google Cloud architecture, services, and security
• Strong AI fluency is mandatory — demonstrated, hands-on use of AI and generative AI tools in daily work, and a clear point of view on how AI reshapes cloud security products
• 7+ years of combined experience across cybersecurity, cloud security, cloud platforms, or enterprise software
• 5+ years of product management or technical product leadership experience, including 3+ years focused specifically on cloud or cloud security products
• Cloud expertise from both a technical and a product management perspective
• Strong roadmap, prioritization, execution, analytical, and problem-solving skills
• Ability to distinguish between a technical integration, a product feature, a sellable capability, and a strategic platform investment
• Excellent communication, customer and partner engagement, and cross-functional leadership skills
• Demonstrated experience co-working with R&D to deliver cloud-related solutions through the full lifecycle: planning, design, and implementation
• Experience working with field teams (sales, SE, customer success) on enablement and structured feedback loops
• Experience engaging customers at both executive (CTO/Director) and hands-on practitioner levels to gather requirements
• Experience collaborating with globally distributed R&D teams across multiple time zones
• Previous experience as a cloud architect, solutions architect, security architect, software engineer, sales engineer, or technical product manager
• Experience with cloud security or CNAPP domains such as posture management, workload and container protection, cloud identity/entitlements, detection and response, and application security
• Familiarity with security operations (SOC) workflows and integration with SIEM, XDR, and SOAR platforms is a plus
• Cloud architectures across AWS, Azure, and Google Cloud
• Cloud-native services, workloads, containers, and Kubernetes
• Cloud security posture, configuration, and compliance
• Cloud identity, authorization, and entitlements
• Cloud threat detection, response, and runtime controls
• AI and generative AI, and their application to cloud security and analyst productivity
• Application security and shift-left/DevSecOps practices
• Infrastructure-as-code and CI/CD pipelines
• APIs, telemetry, policy enforcement, and security findings
• Compliance frameworks (CIS, NIST, PCI-DSS, SOC 2)
• SaaS, hybrid, on-premises, and sovereign deployment architectures
• Candidates must be legally authorized to work in the United States for this employer without sponsorship