Group Product Manager, Agentic Code Security

• Define the multi-year product goal, narrative, and strategic roadmap for agentic security auditing across Google Cloud development workflows.
• Author Product Requirement Documents (PRDs) and Spec-Driven Development (SDD) artifacts, partnering closely with Engineering, Security Researchers, Program Managers, and UX to translate requirements into quarterly OKRs and deliver high-impact releases.
• Establish rigorous qualitative and quantitative evaluation frameworks (e.g., True Positive Precision, Exploitability Validation Rate, Signal-to-Noise Ratio, Mean-Time-to-Remediate, Token/Compute ROI) to benchmark and improve agentic scanning/triage accuracy.
• Design intuitive, low-friction developer workflows across multiple touchpoints including presubmit/postsubmit blocking gates, IDE integrations, triage workflows, and automated CL patching.
• Partner with security gatekeepers and leadership across Product Areas to standardize security domain knowledge assets, threat model integration, and rollout strategies, while monitoring emerging AI security trends, open-source vulnerability intelligence, and academic breakthroughs in agentic security.

Minimum qualifications:

• Bachelor's degree or equivalent practical experience.
• 10 years of experience in product management, technical program management, or software engineering leadership.
• 3 years of experience building, launching, or managing products within Application Security, Cloud Security, Code Analysis, Vulnerability Management, or Developer Tools (CI/CD, DevOps).
• 3 years of experience driving products from conception to launch (0 to 1 and scaling enterprise developer or security platforms).

Preferred qualifications:

• Master’s degree or PhD in Computer Science, Artificial Intelligence, Cybersecurity, or an MBA with a strong technical background.
• Experience with large-scale monorepos, distributed build/CI systems, and containerized sandbox execution environments
• Deep domain understanding of application security concepts: vulnerability classes (CWE, OWASP Top 10, memory safety, logic flaws), threat modeling, static/dynamic code analysis, Kythe/code property graphs, fuzzing, or automated test generation.
• Exceptional written and verbal communication skills.
• Track record of defining product metrics for AI/ML systems (precision, recall, hallucination mitigation, token optimization) and developer productivity metrics (DORA, triage velocity, SLA compliance).

• Bachelor's degree or equivalent practical experience.
• 10 years of experience in product management, technical program management, or software engineering leadership.
• 3 years of experience building, launching, or managing products within Application Security, Cloud Security, Code Analysis, Vulnerability Management, or Developer Tools (CI/CD, DevOps).
• 3 years of experience driving products from conception to launch (0 to 1 and scaling enterprise developer or security platforms).