Group Product Manager (Device & RASP)

Bureau; Bengaluru; On-site; INR 3,000,000 - 6,000,000; Full time

Benefits offered by this job

Health benefits

Learning budget

Flexible PTO

Job summary

Bureau in Bengaluru is seeking a Group Product Manager for Device & RASP to lead a two-product portfolio, shaping strategy, roadmap, and pricing while directing the PM team. You will coordinate across Android, iOS, web, and backend groups to optimize the SDK and device intelligence for fraud defense.

You should have 6–10 years in multi-product PM, deep fraud/risk expertise, and a proven track record shipping SDKs or client-side products in a fast-growing, security-focused environment.

Qualifications

• 6–10 years in product management owning a multi-product portfolio.
• Deep experience in fraud, risk, identity, device intelligence, or anti-abuse.
• Experience shipping an SDK or client-side product; understands mobile OS fragmentation.
• Fluency with detection trade-offs, precision/recall, drift and evaluation quality.
• Ability to read architecture docs and work with security researchers.
• Enterprise B2B sales and procurement experience.
• Exceptional written communication.

Responsibilities

• Own portfolio strategy for Device Intelligence and Runtime Security, including where the two products converge on a shared SDK, signal set, and enforcement model.
• Treat detection efficacy as a product metric, own catch rate, false positive rate, and fingerprint persistence, with labelled datasets, adversarial testing, and regression gates before every release.
• Run quarterly planning across Android, iOS, web, backend, and other relevant stakeholders.
• Hold the line on client-side constraints: SDK size, runtime overhead, crash-free rate, OS compatibility, upgrade adoption, and RASP's under-two-minute no-code integration.
• Own the privacy posture of device identification — signal minimisation, consent, retention, GDPR/DPDP, and App Store and Play policy, and defend it in customer security reviews.
• Own pricing and packaging, standalone and bundled, plus portfolio revenue, adoption, and gross retention.
• Equip the field with the demo, POC playbook, and competitive bake-off kit; join strategic deals and escalations.

Skills

Product management

Fraud & risk

Identity

Mobile security

SDK experience

Enterprise B2B

Written communication

Job description

Bureau is a unified risk decisioning platform for Compliance, Fraud, and Transaction risks. Our platform is a single decision-making engine, powered by a 1 billion+ identity knowledge graph. Over 150 Banks, fintechs, retailers, and digital platforms use Bureau to verify identities faster and stop fraud earlier globally.

Bureau has raised $50M+ from renowned Silicon Valley and global investors including Sorenson Capital and PayPal Ventures and is expanding rapidly from APAC to Americas, Europe, and beyond.

Why Bureau?

Bureau is building the infrastructure that makes digital identities and transactions safe and trustworthy for billions of people. The mission is big, the problems are complex, and the impact is real.

We hire people who want that level of responsibility. People who move fast, build systems from scratch, and care deeply about turning strategy into execution. If you want predictability or narrow scope, this won't be your place. If you want to shape how a scaling global company operates—keep reading.

About the Role: Group Product Manager - Device & RASP

Bureau RASP protects the app from the inside, where sophisticated mobile fraud actually executes. Four Zero Trust layers cover application integrity, runtime and environment threats, network channel protection, and per-threat enforcement, configurable without code changes.

As Group Product Manager, you will own both products as a single portfolio: strategy, roadmap, detection efficacy, packaging, and the PM team that builds them.

What you’ll be doing

• Own portfolio strategy for Device Intelligence and Runtime Security, including where the two products converge on a shared SDK, signal set, and enforcement model
• Treat detection efficacy as a product metric, own catch rate, false positive rate, and fingerprint persistence, with labelled datasets, adversarial testing, and regression gates before every release
• Run quarterly planning across Android, iOS, web, backend, and other relevant stakeholders.
• Hold the line on client-side constraints: SDK size, runtime overhead, crash-free rate, OS compatibility, upgrade adoption, and RASP's under-two-minute no-code integration
• Own the privacy posture of device identification — signal minimisation, consent, retention, GDPR/DPDP, and App Store and Play policy, and defend it in customer security reviews
• Own pricing and packaging, standalone and bundled, plus portfolio revenue, adoption, and gross retention
• Equip the field with the demo, POC playbook, and competitive bake-off kit; join strategic deals and escalations

What You’ll Bring

• 6-10 years in product management owning a multi-product portfolio
• Depth in fraud and risk, identity, device intelligence, mobile application security, or anti-abuse, with genuine familiarity with attacker techniques
• Experience shipping an SDK or client-side product, and an understanding of why mobile is unforgiving: OS fragmentation, store review, release trains you don't control
• Fluency in detection trade-offs, precision and recall, threshold selection, drift, label quality, and the judgment to spot a weak evaluation
• Technical literacy to read an architecture document, query the data yourself, and hold your own with a security researcher
• Enterprise B2B instincts: security and risk buyers, procurement, vendor security reviews, and POCs that convert
• Exceptional written communication

Our Culture

• We hire self-motivated people and get out of their way
• We value performance, not hours worked
• Speed, ownership, and impact matter most

Compensation

• Competitive salary + potential equity
• Health benefits, flexible PTO, learning budget