Product Manager: Professional Tools
Elevate Offensive Security Practitioners

About XBOW

Build the future of offensive security with XBOW. Attackers are already using AI to move faster than defenders can react—we’re creating the platform that puts security ahead in the arms race. Our AI-powered system autonomously discovers, validates, and even exploits vulnerabilities, giving organizations proof-backed results in hours instead of weeks.

Founded by Oege de Moor, creator of GitHub Copilot, and backed by Sequoia, Altimeter, and other leading investors, XBOW is applying cutting-edge AI to one of the world’s most urgent problems. In just over a year, our AI, built by a world-class AI team and legendary security researchers — has uncovered thousands of real-world zero-days across the software billions rely on, and achieved the #1 ranking on HackerOne’s global leaderboard.

We’re a team of builders, hackers, and researchers who thrive on solving problems others think are impossible. If you want to push the boundaries of AI, reshape how security is done, and join the group defining this new era of defense — we’d love to talk.

Your Role: Product Manager for Professional Tools

As Product Manager for Professional Tools, you'll build products that augment and elevate human security testers. Your focus is on reducing false positives, expanding coverage across complex vulnerability classes, and delivering actionable intelligence that goes beyond traditional scanners. You'll be the voice of offensive security practitioners within XBOW.

What you will do

• Own product strategy for professional security testing tools and workflows

• Drive expansion into complex vulnerability classes: IDOR, prompt injection, session/auth issues, business logic flaws, DoS attacks

• Build actionable reporting and intelligence capabilities that provide insights beyond basic vulnerability scanners

• Define false positive reduction strategies and quality improvement initiatives

• Create global dashboard and analytics capabilities across applications, assessments, and organizational units

• Partner with security research community to understand emerging attack vectors and testing methodologies

• Collaborate with Product Design on workflows for security professionals

• workflows optimized for security professionals

• Build integrations with popular security testing tools and frameworks

Skills and qualifications

Essential:

• Degree in a technology related field or equivalent experience

• Significant product management experience, preferably in security or developer productivity, scaling products from startup to $100M

• Deep technical curiosity about attack vectors, vulnerability research, and security systems

• Action-oriented execution style with ability to rapidly prototype and iterate on security tools

• Hands-on experience in offensive security: penetration testing, red teaming, bug bounty, or security research

• Deep understanding of vulnerability classes, attack vectors, and security testing methodologies

• Flawless execution of product work through GitHub Issues, Projects, and Pull Requests

• Strong connections in the security research and practitioner community

• Experience building tools for technical users with complex workflows

Advantageous:

• Active participation in security research community (bug bounties, CVE discoveries, security conferences)

• Experience with security automation tools and frameworks

• Background in security consulting or professional services

• Understanding of compliance and audit requirements for security testing

• Experience with threat modeling and risk assessment methodologies

What we offer

• Compensation & Equity: Competitive salary and equity package, making you a true owner of the company.

• Career Growth: Shape your role, lead the function, and grow with the company as we redefine cybersecurity.

• Meaningful Work: You will tackle technically complex challenges and play a pivotal role in the growth of our business, working alongside an amazing team and some of the world’s experts to shape how AI transforms cybersecurity.

What else you should know

• Location: Remote (all team members are remote but we meet regularly and you’re supported to travel to collaborate with colleagues in person)

• Contract: Full-time.

• Hiring Process:

  1. 45-min introductory chat with our Head of Talent, Zac Wallis.

  2. 45 minutes with our Head of Product, Aqeel Siddiqui.

  3. Take home assessment.

  4. Presentation of take home assessment to product team.

  5. 30 minutes with our Head of Engineering, Andy Rice.

  6. 30-min final meeting with our CEO and founder, Oege de Moor.

We aren't focused on seniority titles at XBOW—so if you’re worried about “leveling,” don’t be. We care a lot more about mission fit, capability, and impact than what’s on your LinkedIn headline.

We believe in people who are driven by curiosity and a willingness to learn. Even if you don't check every box, we encourage you to apply if you're excited about the role and our mission.