Technical Product Manager (Security Testing)

Short facts about us:

• We are a global remote-first team of 100+ people on 4 continents and in 10+ countries.

• We have been protecting our clients since 2014.

• The company has raised over $10M in investments.

• More than 200 customers around the world, including Fortune 500, Nasdaq, and high-growth startups choose Wallarm to protect their API and web applications.

• The company passed Y Combinator, the most prestigious incubator in Silicon Valley, from which Dropbox, Stripe, Docker, etc. came out.

Our product:

Wallarm API security solutions provide proven performance to support innovative companies serving millions of users and billions of API requests per month. Hundreds of Security and DevOps teams globally use Wallarm daily to:

1. Discover. See every asset across your entire attack surface—from cloud environments to every API endpoint with auto-discovery capabilities.

2. Protect. A single suite that goes beyond OWASP Top 10 for full coverage for API specific threats, account takeover, malicious bots, L7 DDoS, and more.

3. Respond. Streamline incident response with complete visibility, smart triggers, and active threat verification.

4. Test. Automate security testing of your APIs and web assets. Prioritize remediation for every asset, in every environment.

About the role:

As a Technical Product Manager for our Security Testing Product, you will play a pivotal role in shaping the future of API security testing. You will drive the product roadmap, collaborate with cross-functional teams, and ensure that our solutions address evolving security challenges. This role requires a blend of technical expertise, market insight, and customer empathy to deliver innovative features that enhance the security posture of our clients.

Key Responsibilities:

• Product Ownership: Develop and maintain a technical roadmap for the security testing product based on market trends, customer feedback, and competitive analysis.

• Сollaboration: Work closely with engineering, UX, marketing, and customer success teams to deliver impactful features aligned with business goals.

• Security Expertise: Incorporate best practices in application security (e.g., OWASP Top 10) into product design and development.

• Innovation: Propose and validate new testing capabilities (e.g., automated vulnerability scanning, API-specific threat detection) to maintain competitive differentiation.

• Market Research: Continuously analyze industry trends, emerging threats, and competitor offerings to identify opportunities for growth.

• Security Research Leadership: Collaborate with developers to define technical requirements and oversee the implementation of complex features.

Requirements

Must have skills:

• Proven experience as a Product Manager, Technical Product Manager or Product Owner in the security domain or similar fields (e.g., SAST/DAST, Vulnerability Management systems, DevOps tools or cloud-native products).

• Strong understanding of API protocols such as JSON-API, GraphQL, XML-RPC, JSON-RPC, OData, gRPC, WebSocket, SOAP and others.

• Expertise in application security concepts (e.g., OWASP Top 10, OWASP API Top 10) and vulnerability management.

• Ability to decompose business needs into actionable technical projects.

• Experience working directly with developers to execute software requirements.

• Excellent communication skills to bridge technical concepts for diverse stakeholders.

Nice to have:

• Expertise in API-specific attacks (e.g., OWASP API Top 10) or participation in vulnerability assessments (e.g., bug bounty programs). 

• Knowledge and experience of building Secure Software Development Lifecycle (SSDLC), integrating security solutions in CI/CD. 

• Hands-on experience with Kubernetes/Helm or Linux system administration.

• Knowledge of MLOps practices or AI-driven approaches to threat detection.

• Certifications such as OSCP, OSWE

• Background in programming languages like Python, Go, or Ruby.

What we offer:

• Ability to work on a product that makes the Internet safer

• Completely remote work and flexible working hours

• Competitive salary and bonuses

• Paid days off

• Medical insurance

• Working equipment

• Professional development and career growth

Join us in building cutting-edge solutions that empower businesses to secure their APIs and web applications against ever-evolving threats!