Staff Product Manager, Hack, Fix, Verify Experience

NightDragon Acquisition Corp.; San Francisco (CA); Hybrid; USD 194,000 - 260,000; Full time

Benefits offered by this job

Inclusive Team

Growth Opportunities

Innovative Culture

Hybrid & Remote Work

Competitive Compensation

Job summary

Horizon3 is seeking a dynamic Product Manager to own and accelerate NodeZero’s remediation, assessment, and inventory experiences. You will align Offensive Security and Precision Defense efforts, delivering a seamless, end-to-end customer journey across Internal, External, Cloud, and WebApp domains.

You will also drive pricing, packaging, and success metrics while partnering with Sales, Marketing, and Customer Success to maximize retention and revenue. Travel to SF Bay Area or NYC is requested.

Qualifications

• Bachelor's degree or equivalent in a technology-related field.
• 8+ years of startup PM experience with technical B2B products.
• Deep understanding of SecOps and IT teams, their needs, pain points, and market solutions to address those needs/pain points.
• Experience owning shared-service or platform capabilities consumed by multiple product teams; comfortable operating without a single dedicated EM counterpart, working across several engineering teams at once.
• Experience building reporting or evidence-generation products for security, audit, or regulated industries.
• Technical aptitude — comfortable diving into pentest findings, attack chains, and remediation guidance, and translating them into product requirements.
• Systems thinking — able to hold a consistent cross-product experience together across teams that are each optimizing for their own domain.
• Experience with ticketing/ITSM integrations (JIRA or similar) a plus.
• Written communication — ability to use modern tools (e.g. ChatGPT, Claude) to quickly and concisely write documents and emails.
• Bias towards action - default to action to drive impact quickly.
• Growth mindset - experience delaying judgement and being a quick study
• Executive presence - experience working directly with executives to drive strategy and execute against success criteria
• Verbal communication - demonstrated thoughtfulness of professional strengths, development areas, successes, failures, and goals
• Hunger - demonstrated ambition to grow professionally
• Servant leadership - demonstrated humility as a means of driving initiatives forward (instinctive "any problem is my problem to solve")

Responsibilities

• Be the CEO of the remediation, assessment, and inventory experience: own its vision, strategy, and priorities, and take accountability for customer outcomes, execution, and commercial success across the portfolio.
• Own financial performance: set retention, expansion, and net revenue targets tied to hack-fix-verify adoption, and partner with Sales, Customer Success, and Finance to identify and deliver against them.
• Build and maintain the business plan: where remediation and workflow capability creates the most customer value and revenue, and the investment and tradeoffs required across the engineering teams that build it.
• Shape pricing and packaging for remediation and integration capability, including upgrade paths and how it lands in the broader NodeZero and Precision Defense offering.
• Define success metrics and lead regular business reviews covering adoption, time to remediate, retention, expansion, and customer outcomes; explain gaps and drive corrective action.
• Partner with Marketing on positioning to SecOps and IT buyers, and with Enablement on messaging, demos, battlecards, and ROI narratives that make remediation a reason to buy and renew.
• Stay ahead of competitors and adjacent categories in remediation, exposure management, and ITSM integration; turn competitive intelligence and win/loss insight into strategy and sales execution changes.
• Own adoption and value realization with Customer Success: accelerate activation, deepen usage across op types, and use churn analysis to improve retention and uncover expansion.
• Own end-to-end design of assessment configuration, scheduling, and authorization across all op types (Internal, External, Cloud, WebApp) as one coherent experience, not fragmented per-domain screens.
• Partner with each op-type PMs to define shared-service vs domain-specific configuration and maintain cross-domain consistency.
• Own inventory as a shared cross-op-type object; align with op-type teams to attack inventory rather than logic itself.
• Track config/scheduling friction to prioritize consistency gaps.
• Own the unified product experience surface end to end; validate customer needs before committing roadmap; ensure ticketing/ITSM integrations are part of the same flow.
• Define requirements-side handoff to engineering to avoid splitting ownership across teams.
• Partner with Precision Defense to layer in new experiences; ensure cohesive, unified flows across offense and defense surfaces.

Skills

Startup PM experience

Technical B2B products

Cross-functional leadership

SecOps domain knowledge

Systems thinking

Executive presence

Verbal communication

Bias towards action

Growth mindset

Servant leadership

Education

Bachelor's degree or equivalent in a technology-related field

Tools

JIRA

Job description

Get to Know Us

Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs.

We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox" security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.

Horizon3 is in search of a dynamic Product Manager (PM) to own and accelerate the connective tissue underneath NodeZero's offensive product suite: remediations, assessment experience, and inventory: the three layers that turn Horizon3’s product portfolio (Internal, External, Cloud, WebApp, Security Controls, Rapid Response, Tripwires) into one coherent customer journey. Customers experience NodeZero as enumerating their inventory, configuring and scheduling an assessment, and then acting on results. This role involves making every robust user flow discoverable, useful, and valuable end to end, driving hack-fix-verify forward as a single integrated experience.

This role also sits at the seam between Offense and Precision Defense. As Precision Defense builds out blue-team agent capability (auto-remediation, CARE), this PM is responsible for making sure that work lands as one unified experience.

This role reports to the Sr. Manager, Product Management for Offensive Security and will take a leadership role in making remediation, assessment, and inventory a differentiated, horizontal capability across NodeZero.

Responsibilities

• Run Remediations as a Business

  • Be the CEO of the remediation, assessment, and inventory experience: own its vision, strategy, and priorities, and take accountability for customer outcomes, execution, and commercial success across the portfolio

  • Own financial performance: set retention, expansion, and net revenue targets tied to hack-fix-verify adoption, and partner with Sales, Customer Success, and Finance to identify and deliver against them

  • Build and maintain the business plan: where remediation and workflow capability creates the most customer value and revenue, and the investment and tradeoffs required across the engineering teams that build it

  • Shape pricing and packaging for remediation and integration capability, including upgrade paths and how it lands in the broader NodeZero and Precision Defense offering

  • Define success metrics and lead regular business reviews covering adoption, time to remediate, retention, expansion, and customer outcomes; explain gaps and drive corrective action

  • Partner with Marketing on positioning to SecOps and IT buyers, and with Enablement on messaging, demos, battlecards, and ROI narratives that make remediation a reason to buy and renew

  • Stay ahead of competitors and adjacent categories in remediation, exposure management, and ITSM integration; turn competitive intelligence and win/loss insight into strategy and sales execution changes

  • Own adoption and value realization with Customer Success: accelerate activation, deepen usage across op types, and use churn analysis to improve retention and uncover expansion

• Own Assessment Experience as a Unified, Cross-Op-Type Capability

  • Own end-to-end design of assessment configuration, scheduling, and authorization across all op types (Internal, External, Cloud, WebApp) as one coherent experience, not fragmented per-domain screens

  • Partner with each op-type PM (Don, Michael, Shane, Ann, Jordan) and their EMs to define what's shared-service (scheduling, templates, authorization) vs. domain-specific (op-type config), and hold the line on consistency across all of them

  • Own inventory as a shared, cross-op-type object; how customers enumerate and understand their asset; partnering with the op-type teams who attack that inventory rather than owning attack logic itself

  • Track config/scheduling friction (support tickets, SE escalations, field feedback) to prioritize the highest-leverage consistency gaps

• Own the Unified Product Experience Experience and Drive Hack-Fix-Verify

  • Own the unified product experience product surface end to end

  • Validate what customers actually want before committing roadmap: hack-fix-verify is the validated end-state; auto-remediation demand is not yet proven. Roadmap decisions should follow evidence, not assumption

  • Own ticketing/ITSM integrations (JIRA and similar) as part of the same flow that surfaces remediation guidance; a customer's path to a fixed finding should not live on a different tab than the finding itself

  • Define the requirements-side handoff to engineering for remediation work, in a structure that avoids splitting ownership of one customer-facing flow across multiple teams

• Partner with Precision Defense to Layer in New Experiences

  • Serve as the offense-side product counterpart to Precision Defense's blue-team agent platform continuous autonomous remediation; co-own the decision of what auto-remediation capability ships and how it's exposed

  • Prevent a bifurcated offense/defense experience: any blue-team agent capability that touches remediation must land inside the same customer flow this role owns, not a parallel one

  • Bring customer and field signal on what "hack-fix-verify-defend" should look like in product, and translate that into shared requirements with Precision Defense's PM/EM counterparts

Travel Required

• Required location: San Francisco Bay Area or New York City

• Up to 20% travel required

Qualifications

• Bachelor's degree or equivalent in a technology-related field

• 8+ years of startup PM experience with technical B2B products

• Deep understanding of SecOps and IT teams, their needs, pain points, and market solutions to address those needs/pain points.

• Experience owning shared-service or platform capabilities consumed by multiple product teams; comfortable operating without a single dedicated EM counterpart, working across several engineering teams at once

• Experience building reporting or evidence-generation products for security, audit, or regulated industries

• Technical aptitude — comfortable diving into pentest findings, attack chains, and remediation guidance, and translating them into product requirements

• Systems thinking — able to hold a consistent cross-product experience together across teams that are each optimizing for their own domain

• Experience with ticketing/ITSM integrations (JIRA or similar) a plus

• Written communication — ability to use modern tools (e.g. ChatGPT, Claude) to quickly and concisely write documents and emails

• Bias towards action - default to action to drive impact quickly

• Growth mindset - experience delaying judgement and being a quick study

• Executive presence - experience working directly with executives to drive strategy and execute against success criteria

• Verbal communication - demonstrated thoughtfulness of professional strengths, development areas, successes, failures, and goals

• Hunger - demonstrated ambition to grow professionally

• Servant leadership - demonstrated humility as a means of driving initiatives forward (instinctive "any problem is my problem to solve")

Compensation and Values

At Horizon3, we believe that our people are our greatest asset, and our compensation philosophy reflects this core value. We are committed to fostering an environment where all employees feel valued, respected, and rewarded for their contributions. Our compensation structure is designed to be fair, competitive, and transparent, ensuring that every team member is recognized and compensated equitably across roles, levels, and locations.

In accordance with various State’s transparency regulations, we provide the following salary range information for this position:

• Base salary range: $194,000 - $260,000 annually. The exact salary will be determined based on the selected candidate’s location, qualifications, experience, and relevant skills.

• Additional compensation: All full-time roles are eligible for an equity package in the form of stock options.

Perks of Horizon3

• Inclusive Team: We value diversity and promote an inclusive culture where everyone can thrive.

• Growth Opportunities: Be part of a dynamic and growing team with numerous career development opportunities.

• Innovative Culture: Work in a collaborative environment that encourages creativity and out-of-the-box thinking.

• Hybrid & Remote Work: We embrace a mix of remote and hybrid work models depending on role and location, including our Chicago office, where some roles require regular in-office presence.

• Competitive Compensation: We offer competitive salary, equity and benefits. Our benefits include health, vision & dental insurance for you and your family, a flexible vacation policy, and generous parental leave.

You Belong Here

Horizon3 is not just an equal opportunity employer - we are a community that values diversity, equity, and inclusion as fundamental principles of our culture and success. We are dedicated to fostering a workplace where everyone feels welcome and respected, regardless of race, color, religion, sex, national origin, age, disability, veteran status, sexual orientation, gender identity or expression, genetic information, marital status, hair length or any other legally protected status by law.

Our commitment to diversity and inclusion means we strive to attract, develop, and retain a workforce that reflects the varied communities we serve. We believe that diverse perspectives drive innovation and strengthen our ability to create cutting-edge cybersecurity solutions. At Horizon3, every team member is valued and supported in an environment that encourages personal and professional growth.

We welcome candidates from all backgrounds and experiences, and we encourage all qualified individuals to apply. Come be a part of Horizon3, where your unique contributions are recognized, and your potential is limitless.

Other Duties

Please note this job description is not designed to cover or contain a comprehensive listing of activities, duties or responsibilities that are required of the employee. Duties, responsibilities, and activities may change at any time with or without notice.

Application Note

In any materials you submit, you may redact or remove age-identifying information such as age, date of birth, or dates of school attendance or graduation. You will not be penalized for redacting or removing this information.