What Youll Do:
You will be responsible for translating the ASPM vision into a detailed product strategy, roadmap, and development backlog that drives code-to-cloud visibility and risk prioritization across the entire application lifecycle.
You will own and manage the end-to-end product development lifecycle for ASPM capabilities, leading product release cycles, identifying and proactively solving bottlenecks, and raising flags when needed to ensure successful delivery.
You will drive the convergence of ASPM and CNAPP by defining requirements and user stories that correlate application security with cloud runtime and proactive context (CSPM, CWPP, CIEM) to eliminate security silos and deliver a unified risk and security platform.
You will be accountable for gathering and synthesizing insights from AppSec engineers, CloudSec teams, DevOps practitioners, and CISOs through customer interviews, user research, and competitive analysis to identify high-impact product opportunities.
You will define and own key product metrics and success criteria including mean-time-to-remediation, vulnerability prioritization accuracy, developer adoption rates, and reduction in exploitable attack surface, using data to drive continuous product optimization.
You will lead cross-functional collaboration with engineering, design, marketing, sales, and customer success to deliver developer-centric features including pull-request scanning, policy-as-code enforcement, and automated remediation workflows.
You will serve as the subject matter expert and evangelist for ASPM, presenting to customers, industry analysts executives, and at conferences to position CrowdStrike as the leader in the converging ASPM/CNAPP market.
What Youll Need:
Bachelor's degree in Computer Science, Engineering, or related technical field.
5+ years of product management experience in application security, cloud security, DevSecOps tooling, or related B2B SaaS domains.
Deep understanding of application security testing tools (SAST, SCA, DAST, IAST, secrets scanning) and their role in the software development lifecycle.
Strong technical knowledge of cloud-native architectures, containers, Kubernetes, CI/CD pipelines, and infrastructure-as-code (Terraform, CloudFormation).
Proven ability to build products for technical personas including developers, AppSec engineers, and CloudSec/DevOps teams, with empathy for their distinct workflows and priorities.
Data-driven approach to product decisions with experience using analytics to measure security outcomes, risk reduction, and developer productivity.
Exceptional communication skills with ability to translate complex technical concepts for executive audiences and influence cross-functional stakeholders.
Bonus Points:
Direct experience with CNAPP platforms (CSPM, CWPP, CIEM) or ASPM solutions.
Background in software engineering, security research, or hands-on AppSec/DevSecOps roles that provide deep technical credibility.
Familiarity with SBOM standards, SLSA framework, supply chain security, and emerging application security regulations.
Track record of successfully launching security products that achieved analyst recognition (Gartner, Forrester, IDC) or significant market share in המשרה מיועדת לנשים ולגברים כאחד.
