Senior Product Manager - Security

As a Security Product Manager at Cloudera, you will drive critical security initiatives across Cloudera, with a primary focus on compliance, vulnerability management, and public sector security requirements. This role is responsible for defining and delivering security capabilities that enable customers - particularly government and regulated industries- to deploy the Cloudera platform securely and confidently at scale across hybrid and private cloud environments. You will work closely with engineering, security, legal, compliance, and field teams to ensure the Cloudera platform meets evolving security standards, responds effectively to vulnerabilities, and maintains leadership in enterprise and public sector security.

As an ideal candidate, you will have a keen eye for the pain points of platform engineers and data engineers who are tasked with building and operating large-scale data pipelines. Along with an innovative mindset to address them. There are millions of things we can build; be the one to ruthlessly prioritise. Then back it up with data, back it up with customer stories, back it up with empathy and back it up with conviction.

The candidate will have responsibilities across the following functions:

Product Vision and Strategy:

• Product Direction: Define and evangelise the long-term vision and product strategy for Cloudera Data Services Platform, aligning it with the company's broader strategic goals.
• Feature Specification: Translate high-level visions into product requirements documents (PRDs), user stories, and epics in Jira for Platform feature development. Define the "what" and "why" for the engineering team, emphasising desired outcomes such as performance, scalability, security, reliability and usability.
• Roadmap Management: Develop and maintain a prioritised product roadmap. Make data-driven decisions on feature priorities, balancing customer needs, market trends, and technical debt.
• Market and Customer Insight: Conduct continuous market research to understand the competitive landscape and identify new opportunities. Serve as the primary conduit for customer feedback through direct engagements with field, customers and partners.

Security Strategy and Roadmap:

• Own and execute the security product roadmap for platform-level security initiatives, including FIPS 140-2/140-3 compliance, cryptographic standards, and secure configuration baselines.
• Translate regulatory, customer, and internal security requirements into clear product requirements aligned with Cloudera's hybrid and private cloud strategy.

FIPS and Compliance Ownership:

• Lead product efforts related to FIPS certification, including scope definition, dependency alignment, validation planning, and ongoing compliance maintenance.
• Partner with engineering, security architects, and compliance teams to ensure cryptographic modules and platform components meet required standards.
• Serve as the product point of contact for audits, certifications, and customer security assessments related to FIPS and compliance.

Vulnerability and CVE Management:

• Own the product response and prioritisation for security vulnerabilities and CVEs across the platform.
• Work cross-functionally with security engineering, release management, and support to ensure timely mitigation, remediation, and customer communication.
• Define and improve processes for vulnerability tracking, impact assessment, and security advisories.

Go-to-Market and Enablement:

• Drive successful product launches by collaborating with Marketing, Sales, and Documentation teams.
• Create compelling messaging and enable both internal teams and customers.
• Define and track KPIs for the Data Service Platform's success, including adoption and revenue.

Requirements:

• Bachelor's Degree, preferably in Computer Science, Engineering or a related technical field.
• Experience: 5+ years of experience in product management, with significant hands-on experience in distributed data platforms, data analytics and/or cloud-native data services.
• Deep knowledge of the Kubernetes ecosystem.
• Experience with regulated industries and data compliance (e. g., GDPR, CCPA, FedRAMP).
• Hands-on experience with AWS EKS, Azure AKS, GCP GKE, Red Hat OpenShift, SUSE Rancher Kubernetes Engine, Upstream Kubernetes.
• Experience managing containerised products delivered via Kubernetes.
• Product Skills: Proven ability to write precise technical specifications (PRDs), build use cases/user stories, analyse customer patterns, simplify complex technical solutions and manage product backlogs effectively.
• Leverage AI to automate workflows.
• Hybrid Cloud: Experience managing products deployed across both Public Cloud and on-premises Private Cloud.
• Familiarity with open-source security, compute and data technologies such as Kubernetes, SSL/TLS, OAuth/OIDC, SAML, OWASP Top 10 and FIPS 140-3