Principal Product Manager, Security

1Password is looking for a Principal Product Manager to shape security strategy across the company, working with Security Engineering and the product teams building customer-facing features. The role bridges cryptographic and architectural detail with clear priorities for feature teams, balancing rigorous security design with usability. The role is remote within the United States or Canada, with travel for in-person engagement as part of almost all roles. US base salary is between $238,000 and $357,000 USD annually; Canada base salary is between $208,000 and $312,000 CAD annually.

Responsibilities

Partner with product teams on security early, identifying security requirements and threat-model implications before designs are locked; Align Security Engineering with product strategy by translating feature-team needs into prioritized security work; Own an independent security roadmap for platform-level investments such as key management and recovery, cryptographic foundations of the zero-knowledge architecture, authentication, and post-quantum cryptography readiness; Lead strategy for the AI era, including agentic access to credentials, secrets for non-human identities and AI agents, and trust models around tools and protocols like MCP; Balance risk and usability with evidence, using adoption, support, and telemetry data alongside threat models; Represent 1Password to the security community, including security researchers, the bug bounty program, and conferences; Raise the bar for product work by coaching PMs on security thinking and setting standards for security-critical product work

Requirements

10+ years of product management experience, including significant time on security-critical products or platforms in a SaaS environment; Deep, demonstrable knowledge of security fundamentals: cryptography, authentication protocols, identity and access management, zero-knowledge and end-to-end encrypted system design, and threat modeling; Fluency in the credential and identity landscape, including passkeys, WebAuthn/FIDO, and the standards shaping how people sign in; A track record of earning credibility with security engineering teams, not just working alongside them; The ability to read and reason through technical specifications, security audits, and cryptographic design documents; Experience making and defending risk-based tradeoffs, and explaining them clearly to engineers, executives, and customers; A history of shipping security features that users actually adopt, and of using friction and adoption data to improve them; Experience setting strategy at the platform or infrastructure level, and influencing roadmaps you don't own without formal authority; Communication that scales from a security research paper to an executive briefing without losing precision in either direction; A strong point of view on how the security landscape is shifting, and the ability to connect it to concrete roadmap decisions

Nice to have

Standing in the security community, through conference talks, publications, research, open-source work, or standards participation; Hands-on experience with AI security: agent identity and authorization, prompt injection, secrets management for automated systems; Experience with compliance and certification regimes such as SOC 2, FedRAMP, or FIPS; Prior work in vulnerability disclosure, incident response, or threat intelligence that gives you a practitioner's intuition; Experience running or working closely with a bug bounty program or researcher community

Benefits

Base salary plus 15% annual bonus; Equity grant; Participation in incentive programs where applicable; Health, dental, 401k (US) or RRSP (Canada) and other benefits; Generous paid time off; Maternity and parental leave top-up programs; Competitive health benefits; RSU program for most employees; Retirement matching program; Free 1Password account; Paid volunteer days; Peer-to-peer recognition through Bonusly; Remote-first work environment