Senior Product Manager I

Overview

Senior Product Manager owning response automation across Cloud SIEM and Cloud SOAR, including playbooks, the automation engine, integrations and actions, and agentic and human-in-the-loop response.

What you'll do

• Own the playbook editor, triggers, actions, execution engine, and the Automation Service, including roadmap, performance, reliability, and competitiveness.
• Define how insights and signals in Cloud SIEM trigger automations and hand off to Cloud SOAR for incident and case management.
• Establish where the Automation Service ends and full Cloud SOAR begins, with clear packaging, upgrade paths, and one coherent customer experience.
• Set the strategy for enrichment, notification, containment, user choice, and custom actions, and prioritize integrations across endpoint, identity, cloud, ticketing, threat intelligence, and messaging tools.
• Own coverage, quality, and lifecycle for out-of-the-box playbooks and integrations.
• Define how AI agents discover, invoke, and chain playbooks and actions, including approval steps, scoped permissions, guardrails, and audit trails.
• Set the multi-quarter vision and roadmap for response automation, connecting current SOC needs with AI-assisted investigation and response.
• Own the health and evolution of shipping playbook, automation, and case management capabilities using customer feedback and execution data.
• Work with engineering and architecture on execution reliability, scalability, error handling, and cost at enterprise scale.
• Define and validate response use cases such as phishing, compromised identity, and endpoint containment, and turn them into phased capabilities with clear behavior and limits.
• Develop the integration and action strategy, including how actions are named, scoped, versioned, and made safe to run without a person watching.
• Partner with detection, investigation, knowledge, and agent teams to turn their needs into shared automation capabilities and clear interfaces.
• Partner with platform governance teams to ensure automation respects access controls, audit requirements, and cost policies.
• Translate strategy into proposals, PRDs, user stories, acceptance criteria, and rollout plans.
• Measure playbook success rate, time to respond, analyst time saved, reliability, cost, and adoption, and show how automation improvements lead to better security outcomes.

What you'll need

• 6+ years of product management experience, including direct ownership of security operations, SOAR, SIEM, or workflow automation products.
• Relevant platform experience (hard requirement).
• Strong technical understanding of incident response workflows, orchestration engines, event-driven systems, APIs, and the integrations that connect security tools.
• Experience running a live product at scale, balancing customer commitments, reliability, and cost while delivering a longer-term roadmap.
• Experience building shared platform capabilities, APIs, or services used by multiple product teams, partners, or external developers.
• The ability to reason about automation risk, including false positives, partial failures, and the point where a human should approve an action.
• Familiarity with SOC operations and frameworks such as MITRE ATT&CK and the NIST incident response lifecycle.

Nice to have

• Experience with case management, threat intelligence, or integration marketplaces.
• An understanding of how AI agents discover tools, take actions, and operate within guardrails, or the ability to ramp quickly.
• Hands-on SOC or security engineering experience.
• Strong analytical skills and comfort using SQL, dashboards, and usage data.
• Clear communication across technical and business audiences, and the ability to write proposals explaining options, dependencies, and recommendations.

Details

• Location: Noida.
• Work mode: Hybrid.