Product Manager - Cloud Risk

We are standing up a new, dedicated Cloud Risk domain inside Tenable Cloud Security, and we are looking for a Product Manager to own it end-to-end. Cross-product impact. The capabilities you build are the risk infrastructure that every other domain in the product runs on. Every customer and nearly every workflow touches Cloud Risk. When the platform tells a security team, “fix this first,” that is your domain. Full ownership. This is a true builder’s role. You will define the domain from the ground up with your own dedicated engineering team and a dedicated security researcher, bringing real innovation to how cloud risk is scored and prioritized, and turning a hard problem into the risk engine the entire product depends on.

Responsibilities

Own the vision, strategy, and roadmap for Cloud Risk domain, and shape it into a foundation that the whole product can build on; Define how cloud risk is scored, prioritized, and explained across severity, exploitability, exposure, identity, and business context, so security teams trust what the platform surfaces; Work side by side with your dedicated dev team, UX Designer, and security researcher to design and ship the risk model, the “top risks” experience, and the shared services other domains consume; Translate high-volume, messy security findings into a clear, trustworthy “what to fix first” experience that cuts noise and speeds remediation; Partner closely with the platform PMs who own CSPM, CIEM, CWP, DSPM, and more, because your domain powers all of theirs; Align with Tenable One PMs to connect cloud risk with Tenable's broader exposure view, so risk is scored and prioritized consistently across the platform; Engage directly with customers, prospects, and the field to validate the risk model against real-world cloud environments and pressure-test prioritization; Set success metrics, write crisp requirements, prioritize ruthlessly, and ship incrementally to learn fast

Requirements

3+ years of proven experience in product management, focused on cloud-native security domains such as misconfigurations, IAM, network exposure, Kubernetes, or container runtime protection; Deep understanding of public cloud environments (AWS, Azure, GCP), including key services, IAM concepts, and infrastructure-as-code (IaC); Proven ability to define and execute product strategy from customer discovery to roadmap planning and successful release; Excellent English, both written and verbal, including great presentation skills; Bachelor’s degree in a technical field or equivalent practical experience