Sr. Technical Program Manager - Security (Threat Detection & Response)

BeyondTrust is a place where you can bring your purpose to life through the work that you do, creating a safer world through our cybersecurity SaaS portfolio. Our culture of flexibility, trust, and continual learning means you will be recognized for your growth, and for the impact you make on our success. You will be surrounded by people who challenge, support, and inspire you to be the best version of yourself. The Role BeyondTrust is a global leader in privileged access management. Our products provide remote access and privileged control capabilities that are deployed across thousands of enterprise environments worldwide. That makes us a high-value target. Nation-state actors, ransomware operators, and sophisticated threat groups actively target companies like ours—not just to compromise our corporate environment, but to reach the customers who trust our software to protect their most sensitive systems. A compromise of BeyondTrust is a compromise of the privileged access layer inside our customers’ networks. We take that responsibility seriously. As a SOC Analyst on our Cyber Defense Operations team, you will serve as a front-line defender responsible for protecting both BeyondTrust’s enterprise infrastructure and the integrity of the products our customers depend on. You will monitor, investigate, and respond to security events in an environment where the stakes are real and the adversaries are capable. You will work alongside experienced threat hunters, incident responders, and detection engineers in a collaborative team that values sharp analytical thinking over checkbox compliance. This team is building toward an AI-augmented operating model. You will be expected to use AI-driven tools in your daily work and to contribute to how we integrate these capabilities into our detection, triage, and response workflows. We are not looking for people who are waiting to be told what to do—we are looking for people who want to build something. What You’ll Do Alert Triage & Monitoring  * Monitor and triage security alerts across SIEM, EDR, and CSPM platforms covering both corporate and product environments. * Investigate alerts to determine scope, severity, and whether escalation is warranted. * Leverage AI-assisted triage and enrichment tools to accelerate analysis and reduce mean time to detect. * Classify, document, and track alerts through the full lifecycle using ticketing and case management systems. Incident Response & Investigation  * Participate in or lead incident response engagements from detection through remediation, including evidence collection, forensic analysis, root cause determination, and stakeholder communication. * Conduct investigations across SIEM, EDR, CSPM, and cloud-native log sources including identity provider logs, cloud audit trails, and network flow data—spanning both corporate and product infrastructure. * Execute established IR runbooks across identity, endpoint, cloud, and email investigation workflows. * Manage or assist with evidence handling, forensic artifact collection, and chain-of-custody procedures. * Produce clear, decision-ready incident summaries and post-incident reports for both technical and leadership audiences. Detection Engineering & Threat Intelligence  * Contribute to the design, implementation, and tuning of detection rules across SIEM and EDR platforms, with a focus on reducing false positives and closing coverage gaps. * Translate threat intelligence (CVE advisories, CISA alerts, vendor bulletins, open-source feeds) into actionable detection content, with particular attention to threats targeting privileged access tooling and supply chain attack vectors. * Help maintain and evolve detection coverage mapped to MITRE ATT&CK. * Partner with threat hunting peers to validate detection logic through hypothesis-driven hunts. AI Integration & Automation  * Use AI-driven tools for alert triage, enrichment, and investigation as a standard part of daily operations. * Contribute to the evaluation, integration, and optimization of AI and automation capabilities across the team’s workflows. * Assist in designing prompts, agent workflows, or LLM-based pipelines that augment analyst capabilities and reduce manual effort. * Partner with engineering teams to improve log ingestion, data quality, and tool integrations. Operational Excellence  * Maintain daily operational notes and shift handoff documentation. * Contribute to and refine IR runbooks, playbooks, and standard operating procedures. * Participate in on-call rotation for after-hours incident escalation. * Track and report on operational metrics (MTTD, MTTR, MTTC, false positive rate) and identify improvement opportunities. * Participate in tabletop exercises, purple team activities, and post-incident reviews.  What You’ll Bring * 2+ years of experience in a SOC, security operations, or incident response role. * Understanding of common attack frameworks (MITRE ATT&CK), network protocols, and endpoint behavior. * Experience with at least one SIEM platform and familiarity with writing search or detection queries. * Familiarity with EDR platforms and cloud environments (IaaS preferred). * Comfort using AI systems (e.g., LLM-based assistants, copilots, or AI-driven analysis tools) as part of security workflows. * Strong written communication skills; able to document findings clearly and concisely for both technical and non-technical audiences. Nice To Have * Experience leading or co-leading complex incident response engagements from triage through remediation. * Experience with identity and access management platforms and cloud security posture management tools. * Scripting and automation skills (Python, PowerShell, or equivalent) applied to security workflows. * Familiarity with SOAR platforms or orchestration tools for automated response and enrichment. * Experience designing or implementing AI agent architectures, LLM-based automation pipelines, or prompt engineering for security use cases. * Experience building or contributing to threat intelligence programs or detection-as-code pipelines. * Understanding of the privileged access management landscape and the threat actors that target it. * Track record of evaluating and adopting emerging technologies in a production security environment. Better Together Diversity. Inclusion. They’re more than just words for us. They are the guiding values of how we build our teams, cultivate leaders, and create a culture where people feel connected. We take care of our employees so they can take care of our customers. Customers who come from all walks of life just like us. We hire incredible people from diverse backgrounds because when we are different together, we are stronger together. About Us BeyondTrust is the global identity security leader protecting Paths to Privilege™. Our identity-centric approach goes beyond securing privileges and access, empowering organizations with the most effective solution to manage the entire identity attack surface and neutralize threats, whether from external attacks or insiders. BeyondTrust is leading the charge in transforming identity security to prevent breaches and limit the blast radius of attacks, while creating a superior customer experience and operational efficiencies. We are trusted by 20,000 customers, including 75 of the Fortune 100, and our global ecosystem of partners. Learn more at www.beyondtrust.com [http://www.beyondtrust.com/].  #LI-DF1

Secure Every Identity, from AI to Human Identity is the key to unlocking the potential of AI. Okta secures AI by building the trusted, neutral infrastructure that enables organizations to safely embrace this new era. This work requires a relentless drive to solve complex challenges with real-world stakes. We are looking for builders and owners who operate with speed and urgency and execute with excellence. This is an opportunity to do career-defining work. We're all in on this mission. If you are too, let's talk. ABOUT THE ROLE We are seeking a Senior Product Manager to drive the vision, strategy, and execution for a key product area within the Auth0 Identity Security product line, with a focused mandate on the rapidly evolving domain of Agentic Security. This role sits at the intersection of product strategy, cross-functional leadership, and agile execution — requiring someone who can both shape long-term direction and deliver with precision. We are the team that builds solutions that protect our customer’s Auth0 environments. Our group delivers features such as attack protection, bot detection, adaptive MFA, identity security for AI Agents and related analytics / insights on the effectiveness of our solutions in thwarting attacks from bad actors. The ideal candidate brings direct, hands-on experience in agentic security product management, with a deep understanding of how AI agents are built, orchestrated, and secured. This includes practical knowledge of agentic workflows, MCP servers, agentic tooling, and their use through productivity applications such as Claude Code. A core focus of this role is runtime security & AI agent classification: building real-time detection, behavioral analysis, and protection capabilities for agentic systems. The successful candidate will have command of the OWASP Top 10 for Agentic AI attack vectors and mitigations, and will bring experience in identifying and responding to threats such as prompt injection, agent intent anomalies, and rogue agent detection — including scenarios where an agent may have been compromised or infiltrated. Beyond agentic-native threats, this role demands strong fluency in fraud and risk mitigation, spanning both traditional and emerging attack surfaces. This includes a depth of knowledge across classic vectors — Account Takeover (ATO), resource draining, and fraudulent account creation — as well as their evolving equivalents in multi-agent and autonomous system environments. KEY RESPONSIBILITIES * Product Strategy & Roadmap: Define and champion a clear product strategy and roadmap, utilizing data-driven prioritization methods to maximize customer value and business impact. Manage inputs from diverse cross-functional stakeholders. * Customer Experience: Drive customer research (surveys, interviews, data analysis) to identify top opportunities, optimize the end-to-end customer journey, and ensure product value realization. * Experience Design: Partner with Product Design on prototypes, wireframes, and concepts, continuously improving the usability of both the UI and APIs for technical and business audiences. * Agile Execution & Delivery: Maintain active, daily collaboration with engineering teams. Write clear user stories, scope work for sprints, and actively participate in Agile cadences. Proactively solve problems and manage ambiguity to ensure on-time delivery. * Performance Optimization: Drive continuous data analysis and insights into customer adoption. Establish clear hypotheses and baselines for feature launches, then track progress toward strategic targets and drive continuous product iteration based on learnings. * Commercial Growth & Value: Partner closely with Product Marketing to run targeted customer campaigns. These efforts will drive trial conversions, accelerate Product-Led Growth (PLG) motions, boost retention, and increase high-value usage and adoption. * Go-to-Market: Proactively monitor the competitive landscape to identify gaps and differentiators. Partner with Product Marketing and pre-sales engineering to refine product positioning, develop engaging customer value messaging, and craft supporting content (blogs, webinars). * Field & Customer Engagement: Actively engage with the field organization (Sales, Solutions Engineering, Technical Account Managers) to build deep knowledge of the voice of the customer. Drive customer conversations during pre-sales, renewals, and at key events to gather feedback and support adoption. * AI-Powered Productivity: Drive efficiency and strategic insight by leveraging AI tools for high-value activities, including prototyping, synthesizing customer insights, accelerating competitive and market analysis, and rapidly generating high-quality product documentation. REQUIRED QUALIFICATIONS * AI Agent Experience:  Significant product experience with AI Agent creation, orchestration and the use of MCP (Model Context Protocol) servers for exposing context, tools, and resources to agents. Ability to use this experience to define how Auth0's should securely authenticate, authorize, and monitor non-human AI principals at runtime. * Agentic Threat Remediation: You have a strong command of the OWASP Top 10 for Agentic AI, and can articulate how each attack class manifests in real-world agentic deployments. You bring direct experience identifying, triaging, and driving remediation of agentic threats, with particular depth in: prompt injection attacks, agent intent anomalies, and rogue agent detection.  * Product Management Experience:  5-8 years of experience in Product Management, whether from startup or high-growth company environments.  * Education: An Undergraduate and/or Masters Degree in Computer Science, Engineering, Information Systems or a related technical field. * General Security Industry Experience: Prior working experience in the security, fraud or compliance industries with foundational knowledge of Identity and Access Management (IAM/CIAM) concepts (e.g., OAuth 2.0, OpenID Connect, SSO, MFA, RBAC) and/or familiarity with compliance frameworks relevant to identity security (e.g., GDPR, CCPA, SOC 2). * Communication: Excellent communication skills (presentation, verbal, and written) and a highly collaborative approach, working with cross-functional stakeholders across the organization. * Enterprise Software: Demonstrated experience in delivery of global, enterprise software across all aspects of the product lifecycle. * Results Driven: A clear history of being outcome-driven and achieving tangible business results through the successful delivery of products, features, or capabilities that you have owned. * Problem Solving: Keen analytical, problem-solving, and decision-making abilities, with a proven capacity to formulate effective action plans even when faced with incomplete, conflicting, or ambiguous inputs. * Entrepreneurial: Bring an entrepreneurial mindset and a strong intellectual curiosity that drives you to learn and delve deeply into both business and technical aspects of this role. * Agile Development: Deep experience working successfully with engineering teams in an Agile development environment, including scoping, sprint planning, and backlog management and prioritization.   #LIHybrid #P-1164.1  Below is the annual salary range for candidates located in Canada. Your actual salary will depend on factors such as your skills, qualifications, and experience. In addition, Okta offers equity (where applicable), bonus, and benefits, including health, dental, and vision insurance, RRSP with a match, healthcare spending, telemedicine, and paid leave (including PTO and parental leave) in accordance with our applicable plans and policies. To learn more about our Total Rewards program, please visit: https://rewards.okta.com/can. The annual base salary range for this position for candidates located in Canada is between: $146,000—$218,000 CAD The Okta Experience * Supporting Your Well-Being  * Driving Social Impact  * Developing Talent and Fostering Connection + Community We are intentional about connection. Our global community, spanning over 20 offices worldwide, is united by a drive to innovate. Your journey begins with an immersive, in-person onboarding experience designed to accelerate your impact and connect you to our mission and team from day one. Okta is an Equal Opportunity Employer. All qualified applicants will receive consideration for employment without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, ancestry, marital status, age, physical or mental disability, or status as a protected veteran. We also consider for employment qualified applicants with arrest and convictions records, consistent with applicable laws. If reasonable accommodation is needed to complete any part of the job application, interview process, or onboarding please use this Form to request an accommodation. Notice for New York City Applicants & Employees: Okta may use Automated Employment Decision Tools (AEDT), as defined by New York City Local Law 144, that use artificial intelligence, machine learning, or other automated processes to assist in our recruitment and hiring process. In accordance with NYC Local Law 144, if you are an applicant or employee residing in New York City, please click here to view our full NYC AEDT Notice.