Senior Product Manager, Product Security

Job description

# **Who is Litmus** Litmus is building the data foundation that powers industrial AI. AI doesn’t work without real-world, contextualized data - Litmus makes that data usable. As AI adoption accelerates, most industrial environments still can’t access or use their operational data. We solve that gap. We’re a growth-stage software company helping manufacturers access, structure, and use real-time data from machines, systems, and sensors at the edge. Our platform sits at the intersection of edge computing, AI, and industrial operations, enabling some of the world’s largest companies to run operations in real time, reduce downtime, and optimize production. Backed by leading investors and trusted by global manufacturers and partners like Google, Microsoft, Dell, Oracle, and Mitsubishi, Litmus is powering the shift toward software-defined manufacturing. # **Why join Litmus** ### ## **Build the infrastructure that makes industrial AI possible** AI is moving beyond the cloud and into the physical world. At Litmus, you’ll build the infrastructure that enables real-time data to power AI and machine learning systems in production environments. ### ## **Work on problems where software meets the real world** Most AI systems fail without access to real-world data. You’ll build the layer that makes them viable in production. We solve challenges at the intersection of distributed systems, real-time data, and industrial constraints — where reliability, scale, and performance are non-negotiable. ### ## **Have real impact, fast** You’ll work on systems used by real customers in production, with direct impact on product and company trajectory. As a scaling company, we move quickly. You’ll have ownership, visibility, and the ability to shape both product and company as we scale. ### ## **Join a high-performance team** We’re building a team that holds a high bar and pushes each other to improve. You’ll work alongside experienced operators, engineers, and leaders who have done this before and are building again at scale. We hire people who take ownership, move quickly, and care about outcomes. No passengers. # **Our culture** At Litmus, the team is collaborative, curious, and low ego. People are scrappy, take ownership, and look for ways to make an impact. We value empathy just as much as execution, whether that’s in how we build, how we communicate, or how we support each other. We’re a growing company, so things move quickly and not everything is perfectly defined. If you enjoy figuring things out, working closely with others, and making steady progress, you’ll do well here. ## **About the Role** Litmus is seeking a hands-on **Senior Product Manager, Product Security** to drive product security across Litmus Edge, Litmus Edge Manager, Litmus UNS, and related platform services. This role combines product management, software engineering, cybersecurity, and AI expertise. You will own the product security roadmap, proactively identify vulnerabilities, collaborate with Engineering on remediation, and research secure, scalable architectures for current and future products. We are looking for a technical product leader who can translate security challenges into product improvements while actively participating in technical investigations, prototyping, and security research. ## **Key Responsibilities** ### **Product Security Strategy and Engineering** · Own and drive the product security roadmap across the Litmus product portfolio. · Proactively identify security vulnerabilities, architectural weaknesses, and emerging threats. · Track relevant CVEs, security advisories, and open-source dependencies. Prioritize remediation based on risk and product impact. · Conduct hands-on vulnerability assessments, security investigations, and architecture reviews across applications, APIs, Linux systems, containers, and infrastructure. · Reproduce vulnerabilities, investigate root causes, and validate fixes with Engineering. · Review source code, configurations, and deployment architectures to identify security risks. · Build scripts, proof-of-concepts, and automated tests to evaluate and validate security solutions. · Work directly with Engineering to plan security improvements, prioritize releases, and balance immediate fixes with long-term investments. ### **Security Architecture, AI, and R&D** · Research and evaluate emerging security technologies and architectures for industrial edge and enterprise environments. · Design and validate secure, scalable deployment models across edge devices, virtual machines, containers, Kubernetes, and cloud infrastructure. · Explore zero-trust principles, workload isolation, sandboxing, authentication, authorization, and secure communication. · Evaluate the security implications of AI-powered applications, autonomous agents, and edge AI workloads. · Apply AI-assisted tools to vulnerability discovery, code analysis, security testing, and automation. · Prototype new security approaches and translate research into product capabilities and roadmap initiatives. · Anticipate future enterprise security requirements and proactively improve product architecture. ### **Secure Development and Cross-functional Collaboration** · Partner with Engineering, DevOps, and QA to integrate security into product design, development, testing, and releases. · Drive secure development practices, automated security testing, dependency management, and software supply chain security. · Define security requirements for APIs, OAuth, RBAC, device management, remote access, and software updates. · Coordinate product security incident response, vulnerability remediation, and security-related releases. · Establish security review processes, technical guidelines, and measurable security objectives. ### **Security Assessments, Compliance, and Customer Engagement** · Coordinate third-party penetration testing, security assessments, and product security audits. Drive remediation of findings. · Support compliance and certification initiatives, including ISO 27001, SOC 2, IEC 62443, and the EU Cyber Resilience Act, as applicable. · Collaborate with IT, DevOps, and leadership on security governance, access controls, and employee security awareness. · Participate in enterprise customer security discussions, technical assessments, and security reviews. · Translate customer security requirements into product features and roadmap priorities. · Develop product security incident response procedures, vulnerability disclosure processes, and customer security communications. ## **Required Qualifications** · 7+ years of experience in software engineering, product security, cybersecurity, security architecture, or technical product management. · Strong hands-on software engineering experience with the ability to investigate vulnerabilities, review code, and validate technical solutions. · Experience defining technical product roadmaps and driving security initiatives with Engineering teams. · Strong understanding of Linux, Docker, Kubernetes, networking, and cloud infrastructure. · Practical knowledge of vulnerability assessment, penetration testing methodologies, threat modeling, and secure software development. · Experience with application and API security, authentication, authorization, encryption, TLS, and certificate management. · Familiarity with CVE/CVSS, open-source dependency security, and vulnerability management. · Experience with AI-assisted development or security tools, scripting, and automation. · Ability to independently research technologies, build prototypes, and collaborate on engineering implementations. · Strong communication skills to engage technical teams, leadership, and enterprise customers. ## **Preferred Qualifications** · Experience with industrial IoT, edge computing, OT security, or enterprise infrastructure software. · Knowledge of industrial protocols such as OPC UA and MQTT. · Experience with embedded Linux, firmware security, secure boot, and OTA updates. · Familiarity with zero-trust architecture, container hardening, virtualization, sandboxing, and microVM technologies. · Experience securing AI applications, autonomous agents, or edge AI workloads. · Knowledge of SBOM, SAST, DAST, CI/CD security, and software supply chain protection. · Familiarity with IEC 62443, NIST, ISO 27001, SOC 2, or the EU Cyber Resilience Act. · Experience supporting enterprise customer security reviews and technical assessments. ## **What Success Looks Like** · Establish proactive security ownership and a measurable security roadmap across Litmus products. · Identify, prioritize, and drive remediation of vulnerabilities through close Engineering collaboration. · Deliver practical improvements in security testing, automation, and secure development practices. · Research and validate future security architectures and scalable deployment models. · Strengthen customer confidence through security assessments, technical engagement, and continuous product security improvements. **The ideal candidate combines strategic product thinking with hands-on engineering, security research, and the ability to turn technical findings into secure, production-ready product capabilities.**