Principal Technical Product Manager - Code & Developer Security
Job Description
Key Skills Required
Master these to land this role
Want to know if you're a match for this job?
About Us
Invicti Security helps more than 4,000 organizations worldwide secure web applications and APIs with the industry’s most accurate application security platform, powered by 20 years of technology leadership in DAST. Combining proof-based testing, runtime intelligence, and continuous innovation, Invicti enables AppSec teams to identify real risk, reduce alert noise, and ship secure software faster.
Invicti's proof-based philosophy, validate what's actually exploitable before surfacing it, sets a high bar for signal quality. Code Security is where that philosophy needs to extend upstream, into a world where AI is generating more code than any team can manually review. The PM who defines that product direction, at this moment, is doing genuinely consequential work.
The Role
AI is changing how software gets written, and it's changing this product area faster than almost any other. Development teams using AI coding assistants are shipping more code, faster, with less visibility into what's in it. That means larger attack surfaces, more opaque dependency chains, more auto-generated IaC, and secrets in places no one reviewed. The tools that win in this environment won't just scan more, they'll surface what actually matters, with enough context that a developer can act on it without filing a ticket.
At the same time, Invicti's portfolio is expanding. Our recently delivered ASPM platform creates a correlation layer above individual scan results. Octo, our agentic offensive security capability, is beginning to close the loop between static findings and validated exploitability. The Code Security product area sits at the foundation of this stack, and this PM will shape how those connections get built.
Key Responsibilities
- Full product ownership for the Code Security product area, SAST, SCA, IaC, Container Security, and Secrets Detection, across the Invicti and Acunetix product lines
- Roadmap definition and prioritization grounded in customer evidence, market data, and portfolio strategy.
- A point of view on how AI-assisted development changes the threat model, and how our scanning, triage, and remediation capabilities need to evolve in response
- Positioning in a highly competitive market that includes incumbents and a growing set of AI-native entrants rethinking what static analysis can do
Requirements
What You'll Need:
- 5+ years of product management experience, with at least 2 years in a technical PM role at a security, developer tools, or infrastructure company desired
- Familiarity with at least two of the core domains: SAST, SCA, IaC security, container security, or secrets management
- A perspective on how AI-assisted development changes the security problem
- Strong written communication
- Experience working in a multi-product environment where roadmap decisions require cross-portfolio thinking
- The ability to move with conviction under ambiguity, and the seniority to bring others along through influence
- Strong ability to use current AI tools to improve the product development lifecycle.
- Added Bonus:
- Prior experience at a SAST, SCA, or software supply chain security vendor
- Exposure to ASPM platforms or consolidated security findings workflows
- Background shipping developer-facing products or integrations into CI/CD pipelines
Benefits
Who We Are:
Invicti Security helps more than 4,000 organizations worldwide secure web applications and APIs with the industry’s most accurate application security platform, powered by 20 years of technology leadership in DAST. Combining proof-based testing, runtime intelligence, and continuous innovation, Invicti enables AppSec teams to identify real risk, reduce alert noise, and ship secure software faster.
Invicti's proof-based philosophy, validate what's actually exploitable before surfacing it, sets a high bar for signal quality. Code Security is where that philosophy needs to extend upstream, into a world where AI is generating more code than any team can manually review. The PM who defines that product direction, at this moment, is doing genuinely consequential work.
Why Invicti:
Your Health & Wellness Matters:
- Health Insurance: Taking care of our team goes beyond the office. We cover 100% of employee health care, vision and dental premium costs. For dependents, we contribute 75% of the health care and 50% vision/dental premium cost, so you can be sure that you and your family are in the best possible health. Coverage is effective your first day.
- Employee Assistance Program: Emotional Support Counseling services - 24/7 Life Coaching, Dependent Care, Elder Care, Financial & Legal Support, Wellness Coaching, New Parent Support and more
- Parental Leave: 16 week paid leave for birthing parent recovery. 4 week paid leave for non-birthing/bonding parent
- 401(k) Savings Plan: 50% up to 6% company match with 100% annual cliff vesting
We Value Adult/Life Balance:
- Hybrid Working Schedule: a hybrid/home schedule
- Discretionary Time Off: Enjoy a flexible vacation schedule where you do not have to wait to use time off until it is accrued
- Quarterly Thrive-Wellness Days: One extra vacation day per quarter where the entire company takes a break from normal, daily activities to refresh and rejuvenate
- Volunteering: 5 days of paid time off each year to participate in the volunteer activities of your choice
We Value You:
- Employee Recognition: Ongoing recognition & rewards. A Culture that emphasizes personal and professional growth
How would you rate this job post?
See what other professionals think about this role.
Similar Opportunities
Explore Top Companies in this Space
Conga
Software
Creative Chaos
Custom Software Development
Vanta
Security Compliance
Censys
Cybersecurity / Attack Surface Management / Threat Intelligence / SaaS
Invicti
View Company ProfileInvicti (operating at invicti.com) is a web application and API security testing platform engineered for enterprise-level security. Founded in 2018 by Ferruh Mavituna and Neil Roseman, and headquartered in Austin, Texas, USA, Invicti enables organizations to continuously scan and secure all of their web applications and APIs. Under the hood, Invicti's powerful enterprise web application security scanner detects and verifies real vulnerabilities in modern web applications. This allows IT, security, and compliance teams to identify and remediate security risks, ensuring the integrity of their digital assets. Backed by significant funding.
Safety First
- Never pay for a job application.
- Do not share sensitive bank info.
- Verify the client before starting work.
