Principal Product Manager, Remediations Experience

Get to Know Us

Horizon3 Horizon3.ai ↗ is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs.

We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.

Horizon3 Horizon3.ai ↗ is in search of a dynamic Product Manager (PM) to own and accelerate the connective tissue underneath NodeZero's offensive product suite: remediations, assessment experience, and inventory: the three layers that turn Horizon3 Horizon3.ai’s ↗ product portfolio (Internal, External, Cloud, WebApp, Security Controls, Rapid Response, Tripwires) into one coherent customer journey. Customers experience NodeZero as enumerating their inventory, configuring and scheduling an assessment, and then acting on results. This role involves making every robust user flow discoverable, useful, and valuable end to end, driving hack-fix-verify forward as a single integrated experience.

This role also sits at the seam between Offense and Precision Defense. As Precision Defense builds out blue-team agent capability (auto-remediation, CARE), this PM is responsible for making sure that work lands as one unified experience.

This role reports to the Sr. Manager, Product Management for Offensive Security and will take a leadership role in making remediation, assessment, and inventory a differentiated, horizontal capability across NodeZero.

Responsibilities:

• Run Remediations as a Business

• Be the CEO of the remediation, assessment, and inventory experience: own its vision, strategy, and priorities, and take accountability for customer outcomes, execution, and commercial success across the portfolio

• Own financial performance: set retention, expansion, and net revenue targets tied to hack-fix-verify adoption, and partner with Sales, Customer Success, and Finance to identify and deliver against them

• Build and maintain the business plan: where remediation and workflow capability creates the most customer value and revenue, and the investment and tradeoffs required across the engineering teams that build it

• Shape pricing and packaging for remediation and integration capability, including upgrade paths and how it lands in the broader NodeZero and Precision Defense offering

• Define success metrics and lead regular business reviews covering adoption, time to remediate, retention, expansion, and customer outcomes; explain gaps and drive corrective action

• Partner with Marketing on positioning to SecOps and IT buyers, and with Enablement on messaging, demos, battlecards, and ROI narratives that make remediation a reason to buy and renew

• Stay ahead of competitors and adjacent categories in remediation, exposure management, and ITSM integration; turn competitive intelligence and win/loss insight into strategy and sales execution changes

• Own adoption and value realization with Customer Success: accelerate activation, deepen usage across op types, and use churn analysis to improve retention and uncover expansion

• Own Assessment Experience as a Unified, Cross-Op-Type Capability

• Own end-to-end design of assessment configuration, scheduling, and authorization across all op types (Internal, External, Cloud, WebApp) as one coherent experience, not fragmented per-domain screens

• Partner with each op-type PM (Don, Michael, Shane, Ann, Jordan) and their EMs to define what's shared-service (scheduling, templates, authorization) vs. domain-specific (op-type config), and hold the line on consistency across all of them

• Own inventory as a shared, cross-op-type object; how customers enumerate and understand their asset; partnering with the op-type teams who attack that inventory rather than owning attack logic itself

• Track config/scheduling friction (support tickets, SE escalations, field feedback) to prioritize the highest-leverage consistency gaps

• Own the Unified Product Experience Experience and Drive Hack-Fix-Verify

• Own the unified product experience product surface end to end

• Validate what customers actually want before committing roadmap: hack-fix-verify is the validated end-state; auto-remediation demand is not yet proven. Roadmap decisions should follow evidence, not assumption

• Own ticketing/ITSM integrations (JIRA and similar) as part of the same flow that surfaces remediation guidance; a customer's path to a fixed finding should not live on a different tab than the finding itself

• Define the requirements-side handoff to engineering for remediation work, in a structure that avoids splitting ownership of one customer-facing flow across multiple teams

• Partner with Precision Defense to Layer in New Experiences

• Serve as the offense-side product counterpart to Precision Defense's blue-team agent platform continuous autonomous remediation; co-own the decision of what auto-remediation capability ships and how it's exposed

• Prevent a bifurcated offense/defense experience: any blue-team agent capability that touches remediation must land inside the same customer flow this role owns, not a parallel one

• Bring customer and field signal on what "hack-fix-verify-defend" should look like in product, and translate that into shared requirements with Precision Defense's PM/EM counterparts

Travel Required

• Required location: San Francisco Bay Area or New York City

• Up to 20% travel required

Qualifications:

• Bachelor's degree or equivalent in a technology-related field

• 8+ years of startup PM experience with technical B2B products

• Deep understanding of SecOps and IT teams, their needs, pain points, and market solutions to address those needs/pain points.

• Experience owning shared-service or platform capabilities consumed by multiple product teams; comfortable operating without a single dedicated EM counterpart, working across several engineering teams at once

• Experience building reporting or evidence-generation products for security, audit, or regulated industries

• Technical aptitude — comfortable diving into pentest findings, attack chains, and remediation guidance, and translating them into product requirements

• Systems thinking — able to hold a consistent cross-product experience together across teams that are each optimizing for their own domain

• Experience with ticketing/ITSM integrations (JIRA or similar) a plus

• Written communication — ability to use modern tools (e.g. ChatGPT, Claude) to quickly and concisely write documents and emails

• Bias towards action - default to action to drive impact quickly

• Growth mindset - experience delaying judgement and being a quick study

• Executive presence - experience working directly with executives to drive strategy and execute against success criteria

• Verbal communication - demonstrated thoughtfulness of professional strengths, development areas, successes, failures, and goals

• Hunger - demonstrated ambition to grow professionally

• Servant leadership - demonstrated humility as a means of driving initiatives forward (instinctive "any p