Product Manager: Security

About this job

CodeRabbit is hiring a Product Manager for its Security product in Bengaluru. CodeRabbit is a leading AI code review platform that builds symbiotic partnerships between developers and artificial intelligence, conducting over two million code reviews weekly and backed by significant funding. In this role, you will own CodeRabbit's AI-driven security scanner end to end, which hunts for vulnerabilities across entire codebases and integrates findings directly into pull request reviews. A normal day involves working closely with engineers to build the agentic scanning pipeline, defining detection quality, shaping the findings experience, and partnering with Sales and other teams to address the needs of AppSec buyers and developers. This position requires deep security expertise to ensure that vulnerability grading and exploitability assessments maintain high precision and earn the trust of security teams.

Responsibilities

• Own the security product end to end, including deep codebase scans and pull request review security findings.
• Decide which vulnerability classes, languages, and scanner capabilities to invest in across SAST, secrets detection, and dependency analysis.
• Define detection quality standards, precision, and the noise bar required before a customer sees a finding.
• Own the triage, resolution, and presentation of security findings, treating false positives as trust issues.
• Partner with Sales on enterprise security evaluations and shape pricing and packaging with Growth and Finance.
• Collaborate daily with engineers building the agentic scanning pipeline to set detection priorities.

Requirements

• 5 to 8 years of experience in the security space through security product management or hands-on security work.
• Product management experience with deeply technical products, ideally at a B2B SaaS or developer tools company.
• Practical knowledge of real vulnerability classes and exploitation methods.
• Familiarity with the security tooling landscape including SAST, DAST, secrets scanning, and software composition analysis.
• Technical fluency to read code, understand APIs, and communicate with engineers.
• Strong writing and precise communication skills for creating PRDs and tickets.
• Comfort with ambiguity and the ability to move from fuzzy problems to clear specifications.

Good to have

• Hands-on practitioner background with CVEs, bug bounty history, CTFs, or pentest findings.
• Experience shipping products built on LLMs or agentic systems.
• Direct vendor-side experience in the code security market.
• Working knowledge of Git platforms such as GitHub, GitLab, Bitbucket, or ADO as a power user or PM.

Who should apply

This role suits experienced product managers who have a strong background in the security domain, such as application security, penetration testing, or vulnerability research. You must possess deep technical judgment regarding vulnerability severity and false positives to gain the trust of AppSec teams. The posting does not state that freshers can apply, as it specifically requires 5 to 8 years of security experience. Candidates who are technically fluent, possess high ownership, and thrive in ambiguous, fast-moving environments will find this opportunity a great fit.

Frequently asked questions