Principal Product Manager - Identity Threat Detection & Response

Elastic is a company specializing in search and AI solutions, providing cloud-based platforms for search, security, and observability used by more than 50% of the Fortune 500. The role is within Elastic Security, focusing on Identity Threat Detection and Response (ITDR) and leveraging Entity Analytics and Entity Store technologies.

• 10+ years of product management or solution delivery experience in security products like SIEM, XDR, EDR, identity security, or detection and response.
• Deep knowledge of identity-based attack techniques and identity fabrics including Active Directory, cloud identity providers, SSO, OAuth, and privileged access.
• Expertise in ITDR, entity behavioral analytics (UEBA), and non-human identities such as service accounts and AI agents.
• Strong technical understanding of AI and ML, including behavioral analytics, anomaly detection, LLMs, and agentic systems.
• Proven ability to move fast, learn from experiments, and use AI tools to aid decision-making.
• Leadership experience in matrixed organizations, aligning stakeholders and driving execution in a remote-first environment.
• Excellent communication skills to articulate complex concepts to technical and non-technical audiences.
• Customer-focused with an interest in industry trends and building products to protect against identity-based threats.

• Define and own the vision, strategy, and roadmap for ITDR within Elastic Security, evolving Entity Analytics from behavioral analytics to identity defense.
• Manage plans for non-human and AI agent identities, including modeling service accounts, workloads, and secrets.
• Collaborate with threat research and detection engineering focusing on identity-specific threats such as credential access and privilege escalation.
• Drive response and containment strategies using identity-system integrations and automated responses with human oversight.
• Work closely with enterprise customers, security operations, sales, and solution architects to understand requirements and clarify product needs.
• Partner with design teams to develop investigation and response experiences integrating identity signals across SIEM and XDR platforms.
• Gain deep market knowledge of identity-security trends and threats to develop strategy and engage analysts.
• Evangelize Elastic's identity capabilities through content such as blogs, talks, and community engagement.

This position excludes nationals located in or from Belarus, Cuba, Iran, North Korea, Syria, Russia, or certain annexed Ukrainian territories due to export control licensing requirements. Elastic is an equal opportunity employer committed to inclusion and accommodations during the recruitment process.