Staff Product Manager

Flashpoint; Oregon; Hybrid; USD 175,000 - 215,000; Full time

Benefits offered by this job

Gym reimbursements

Expensed lunches

Inclusive employee events

Job summary

Flashpoint is seeking a Staff Product Manager for Vulnerability Intelligence to own the product line end to end—strategy, pricing, packaging and how it fits customers' workflows.

You will partner with an engineering lead and vulnerability analysts, define the AI play, advance integrations with SIEM, ticketing and vulnerability management, and shape the API surface for customers and tools. This is a senior IC role with real strategic weight and direct customer impact.

Qualifications

• Depth in the vulnerability domain: CVE governance, enrichment, exploitation signals and prioritization frameworks (e.g. NVD, KEV, EPSS, SSVC, CVSS v4).
• Ownership of a B2B SaaS revenue product line, with a record of shaping pricing, packaging and adoption.
• Fluency in querying, analyzing and presenting data to drive decisions.
• Working knowledge of integrations and APIs, and of the platforms vulnerability data flows into (SIEM, ticketing, vulnerability management, ServiceNow).
• Familiarity with SBOM and VEX, and with how regulation is changing what customers ask for.
• Strong customer discovery skills and the independence to set direction, not just carry out a backlog.

Responsibilities

• Own strategy, roadmap and commercial performance of the Vulnerability Intelligence product lines, including migration from VulnDB to Ignite and related integrations.
• Define the vulnerability AI play: where agents and AI-driven workflows add real value on vulnerability data.
• Build on the attack surface management capability and decide depth of integration.
• Make build, buy and partner calls across data sources, enrichment and delivery.
• Shape the API and MCP surface so customers and tools can use our vulnerability data in SIEM, ticketing and automation platforms.
• Be the technical answer of record for sales, support and customers and represent Flashpoint externally when needed.
• Work daily with the engineering lead and vulnerability analysts to ground decisions in data capabilities.
• Turn a fast-changing vulnerability landscape into a clear roadmap and POV.

Skills

Vulnerability product ownership

Customer discovery

AI in security workflows

Data-driven decisions

Strategic roadmap

Executive communication

Tools

SIEM

ServiceNow

VulnDB

Job description

Flashpoint is the pioneering leader in threat data and intelligence. We empower commercial enterprises and government agencies to decisively confront complex security challenges, reduce risk, and improve operational resilience amid fast-evolving threats. Through the Flashpoint Ignite platform, we deliver unparalleled depth, breadth and speed of data from highly relevant sources, enriched by human insights. Our solutions span cyber threat intelligence, vulnerability intelligence, geopolitical risk, physical security, fraud and brand protection. The result: our customers safeguard critical assets, avoid financial loss, and protect lives. Discover more at flashpoint.ioVulnerability data is in the middle of a reset. The way CVEs are scored, enriched and governed has shifted, the volume keeps climbing, and teams are drowning in findings while still asking the same question: what do I fix first, and why? Flashpoint's Vulnerability Intelligence line is built to answer it, with analyst-curated coverage that reaches past the CVE list.

As the Staff Product Manager for Vulnerability Intelligence, you own that product line end to end: where it goes, how it is priced and packaged, and how it earns its place in customers' workflows.

This is a senior individual contributor seat with real strategic weight. You will carry the vulnerability roadmap, work directly with customers, and set the vulnerability AI strategy for the company, alongside a series of AI modules that is about to launch. You will partner with an engineering lead, with Flashpoint's vulnerability analysts, and with a PM team that works as one group.

We have a role for you if, you

• Have owned a vulnerability product, or a vulnerability-adjacent one (vulnerability management, exposure management, vulnerability-focused threat intelligence), in some shape or form
• Are comfortable in the data behind the product: how CVEs are sourced, enriched and scored, how patches really work, and why prioritization matters to the person who has to do the patching
• Pull your own data to answer product questions instead of waiting for a report
• Talk to customers regularly and know how to turn a vague pain point into the right question, and the right question into an answer
• Look at a feature request and see the long‑term vision behind it, and say no when the vision calls for it
• Use AI in your daily work and have strong opinions about where it helps and where it does not in security workflows
• Like owning a product line where you shape the ecosystem around it, rather than operating inside one that is already defined
• Can explain a technical tradeoff to an engineer, a customer CISO and a sales team in the same afternoon

What you will get to do on our team

• Own the strategy, roadmap and commercial performance of the Vulnerability Intelligence product lines, including the migration of products from VulnDB to Ignite and the integrations that go with it
• Define the vulnerability AI play: where agents and AI-driven workflows add real value on vulnerability data, and how to make customers want to buy it
• Build on our newly launched attack surface management capability and decide how much deeper that integration goes
• Make build, buy and partner calls across data sources, enrichment and delivery
• Shape the API and MCP surface so customers and their tools can put our vulnerability data to work in SIEM, ticketing, vulnerability management and orchestration platforms
• Be the technical answer of record on the product for sales, support and customers, and represent Flashpoint externally where it counts
• Work daily with the engineering lead for the vulnerability team and with the analysts who lead vulnerability research, so product decisions stay grounded in what the data can actually support
• Turn a fast-changing vulnerability landscape (new governance models, new enrichment sources, new regulatory pressure) into a clear point of view and a roadmap that responds to it

What you will achieve

• Within 30 days: You are fluent in our vulnerability data and product lines, have met the engineering and analyst partners, and have spoken with a first set of customers.
• Within 60 days: You have a written view of where the vulnerability product line is strong and where it is exposed, and a draft of the roadmap and AI hypotheses to test.
• By 90 days: You have a roadmap the team believes in, a customer research rhythm in place, and a clear position on the vulnerability AI play.

To be successful in this role, you will need

• Depth in the vulnerability domain: you can speak credibly about CVE governance, enrichment, exploitation signals and prioritization frameworks (for example NVD, KEV, EPSS, SSVC, CVSS v4)
• Ownership of a B2B SaaS revenue product line, with a record of shaping pricing, packaging and adoption
• Fluency in data: comfortable querying, analyzing and presenting data to drive decisions
• Working knowledge of integrations and APIs, and of the platforms vulnerability data flows into (SIEM, ticketing, vulnerability management, ServiceNow)
• Familiarity with software supply chain concepts such as SBOM and VEX, and with how regulation is changing what customers ask for
• Strong customer discovery skills and the independence to set direction, not just carry out a backlog

Base pay range: $174,900/yr. to $215,000/yr. plus target bonus

Why Flashpoint is a Great Place to Work

• Diversity . Flashpoint is committed to fostering, cultivating and preserving a culture of diversity, inclusion, belonging, and equity. We recognize that diversity is key to achieving our vision. We believe that every person and their experiences contribute to building a work environment and products and services that will change the world.
• Culture and Belonging. Our company's culture isn't something you join, it's something you build and shape, and each person's unique backgrounds and experiences contribute to who Flashpoint is and will become. You will have ample opportunities to connect with coworkers through various communication channels and company-funded virtual events: book clubs, happy hours, committees, DIBE discussion group, Donut mixers, local team member meetups and much more.
• Perks. Flashpoint understands that personal wellness is one of the keys to a happy, healthy and productive work environment. That's why we also prioritize health and wellness perks like gym reimbursements, expensed lunches, cool cultural initiatives and inclusive employee events.
• Career Growth. Flashpoint is invested in the growth of our team members and understands that frequent, two-way feedback is critical to that growth. We encourage regular one-on-ones with your manager, a regular schedule of performance reviews, learning and development opportunities, and guidance through formalized career paths; whether that be towards being a great manager, being a great individual contributor, or a lateral move to gain breadth of knowledge and experience.