Skip to content
Flashpoint

Staff Product Manager

Remote in the United StatesRemote · United States
Staff · FullTime · Product
POSTED 3 NOVVERIFIED 33M AGO
Apply Ask
Open for
0d
since 3 Nov
Hiring · 30d
5
0 net · open roles

Flashpoint is the pioneering leader in threat data and intelligence. We empower commercial enterprises and government agencies to decisively confront complex security challenges, reduce risk, and improve operational resilience amid fast-evolving threats. Through the Flashpoint Ignite platform, we deliver unparalleled depth, breadth and speed of data from highly relevant sources, enriched by human insights. Our solutions span cyber threat intelligence, vulnerability intelligence, geopolitical risk, physical security, fraud and brand protection. The result: our customers safeguard critical assets, avoid financial loss, and protect lives. Discover more at flashpoint.io

Vulnerability data is in the middle of a reset. The way CVEs are scored, enriched and governed has shifted, the volume keeps climbing, and teams are drowning in findings while still asking the same question: what do I fix first, and why? Flashpoint's Vulnerability Intelligence line is built to answer it, with analyst-curated coverage that reaches past the CVE list. As the Staff Product Manager for Vulnerability Intelligence, you own that product line end to end: where it goes, how it is priced and packaged, and how it earns its place in customers' workflows.

This is a senior individual contributor seat with real strategic weight. You will carry the vulnerability roadmap, work directly with customers, and set the vulnerability AI strategy for the company, alongside a series of AI modules that is about to launch. You will partner with an engineering lead, with Flashpoint's vulnerability analysts, and with a PM team that works as one group.

We have a role for you if, you

Have owned a vulnerability product, or a vulnerability-adjacent one (vulnerability management, exposure management, vulnerability-focused threat intelligence), in some shape or form

Are comfortable in the data behind the product: how CVEs are sourced, enriched and scored, how patches really work, and why prioritization matters to the person who has to do the patching

Pull your own data to answer product questions instead of waiting for a report

Talk to customers regularly and know how to turn a vague pain point into the right question, and the right question into an answer

Look at a feature request and see the long-term vision behind it, and say no when the vision calls for it

Use AI in your daily work and have strong opinions about where it helps and where it does not in security workflows

Like owning a product line where you shape the ecosystem around it, rather than operating inside one that is already defined

Can explain a technical tradeoff to an engineer, a customer CISO and a sales team in the same afternoon

What you will get to do on our team

Own the strategy, roadmap and commercial performance of the Vulnerability Intelligence product lines, including the migration of products from VulnDB to Ignite and the integrations that go with it

Define the vulnerability AI play: where agents and AI-driven workflows add real value on vulnerability data, and how to make customers want to buy it

Build on our newly launched attack surface management capability and decide how much deeper that integration goes

Make build, buy and partner calls across data sources, enrichment and delivery

Shape the API and MCP surface so customers and their tools can put our vulnerability data to work in SIEM, ticketing, vulnerability management and orchestration platforms

Be the technical answer of record on the product for sales, support and customers, and represent Flashpoint externally where it counts

Work daily with the engineering lead for the vulnerability team and with the analysts who lead vulnerability research, so product decisions stay grounded in what the data can actually support

Turn a fast-changing vulnerability landscape (new governance models, new enrichment sources, new regulatory pressure) into a clear point of view and a roadmap that responds to it

What you will achieve

Within 30 days

You are fluent in our vulnerability data and product lines, have met the engineering and analyst partners, and have spoken with a first set of customers.

Source · Flashpoint · AshbyFirst seen 3 NovOriginal ↗Method