Dragos

Staff Product Manager, Security Configuration Management

United States · Staff+

Sponsorship not specified$82k-$800kDetected 12 days ago

CybersecurityProduct ManagementProduct StrategyControlsLeadership

About the role

Translate customer needs, compliance mandates, and market trends into a clear quarter-over-quarter SCM roadmap.
Represent Dragos's perspective on security configuration management capabilities, device hardening best practices, and compliance readiness to customers, analysts, and industry groups.
Make decisions regarding prioritization, trade-offs in features, timelines, resources, and quality, ensuring alignment with business goals.

Drive the development and management of core SCM capabilities, including configuration hardening and remediation, continuous drift detection, and compliance reporting across the full xOT environment.
Define and evolve the configuration policy engine, including logic for evaluating device configurations against security baselines and industry frameworks such as IEC 62443, CIS Benchmarks, NIST SP 800-82, NIS2, and NERC CIP, along with the compliance reporting workflows that support customer audit readiness.
Develop a deep understanding of xOT device security posture, hardening methodologies, and the threat landscape associated with device misconfigurations, default credentials, unpatched firmware, and unmanaged device risk.
Collaborate with internal stakeholders to identify business opportunities, clearly communicating solutions, costs, and business case justifications.
Independently measure, track, and develop plans to improve product KPIs.

Partner with asset intelligence and data collection teams to ensure the SCM product has accurate device profiles, firmware intelligence, and vulnerability context required for high-fidelity configuration assessments.
8+ years of Product Management experience building or maintaining enterprise security products in cybersecurity, device security, configuration management, endpoint security, or adjacent security domains.
Strong understanding of security configuration management concepts, including device hardening methodologies, configuration baseline and drift management, automated remediation workflows, and the policy evaluation approaches that enable organizations to enforce and maintain secure device configurations at scale across diverse device types.
Experience with active device profiling and discovery methods, including protocol-level fingerprinting, agentless assessment approaches, and the data collection techniques needed to accurately characterize diverse xOT device types acr

Engage directly with customers and customer-facing teams to discover and validate use cases, gather feedback, and iterate on product direction.
Support Sales with product insights for POCs, competitive positioning within the xOT security market, and technical guidance that connects SCM capabilities to customers' compliance, resilience, and operational continuity requirements.

This listing is sourced directly from Dragos's careers page and normalized into a canonical job model.