Principal Product Manager, Security

We are seeking an experienced Product Manager with a strong background in security to join our dynamic team. This role will be crucial in defining and executing the product strategy for our security offerings, ensuring our products are robust, reliable, and meet the evolving needs of our customers in a secure manner. The ideal candidate will possess a deep understanding of database security, networking, and identity management, and will be adept at navigating the complexities of product development from conception to launch.

What you will do:

• Define and own the security product roadmap across ClickHouse Cloud, including areas such as access controls (IAM, SSO, SCIM), encryption and key management (BYOK, KMS integrations), audit logging, secure network boundaries (VPC Peering, private endpoints), and tenant isolation.
• Work closely with engineering to deliver secure features and ensure the control and data planes follow best practices for multi-tenant cloud security.
• Support enterprise deployment models such as BYOC (Bring Your Own Cloud), private regions, and air-gapped environments by enabling secure architecture patterns and controls.
• Partner with the compliance team to ensure product capabilities support frameworks like SOC 2, ISO 27001, HIPAA, and FedRAMP.
• Engage directly with customers to understand their security and compliance requirements and translate them into scalable, reusable product capabilities.
• Collaborate with GTM teams (Sales, Marketing, Support) to develop messaging, documentation, and training for security features and compliance-readiness.
• Serve as the go-to resource for security product matters, effectively communicating roadmaps and setting expectations with stakeholders.

About You:

• 8+ years of product management experience, with at least 3 years focused on cloud security, infrastructure, or enterprise SaaS platforms.
• Deep understanding of cloud security principles, including identity and access management (IAM), network security, encryption, secrets management, and audit logging.
• Experience delivering secure multi-tenant architectures on AWS, GCP, or Azure.
• Familiarity with compliance frameworks such as SOC 2, HIPAA, ISO 27001, FedRAMP, and GDPR.
• Strong technical background; able to engage deeply with engineering on topics like access policies, secure service-to-service communication, and threat modeling.
• Excellent written and verbal communication skills with the ability to explain complex technical concepts to both technical and non-technical audiences.
• Proven ability to work cross-functionally across security, legal, compliance, operations, and customer-facing teams.

Preferred Qualifications:

• Prior experience securing a data platform, database product, or real-time analytics service.
• Familiarity with ClickHouse or other databases such as Snowflake, BigQuery, or Redshift.
• Experience supporting BYOC or private deployment models.
• Background working with open source software or developer-focused products.