Staff Product Manager, Hack, Fix, Verify Experience

Get to Know Us

Horizon3 is a fast-growing, remote cybersecurity company dedicated to the mission of enabling organizations to proactively find, fix and verify exploitable attack vectors before criminals exploit them. Our flagship product, the NodeZeroTM platform, delivers production-safe autonomous pentests and other key assessment operations that scale across the largest internal, external, cloud, and hybrid cloud environments. NodeZero has been adopted by organizations of all sizes, from small educational institutions to government agencies and Global 100 enterprises. It is used by IT Ops/SecOps teams, consulting pentesters, and MSSPs and MSPs.

We are a fusion of former U.S. Special Operations cyber operators, startup engineers & operators, and formerly frustrated cybersecurity practitioners. We're committed to helping solve our common security problems: ineffective security tools and false positives, resulting in alert fatigue, blind spots, "checkbox” security culture, cybersecurity skills shortage, and the long lead time and expense of hiring outside consultants. Collectively, we are a team of learn it alls, committed to a culture of respect, collaboration, ownership, and results.

Horizon3 is in search of a dynamic Senior/Staff Product Manager (PM) to own and accelerate the connective tissue underneath NodeZero's offensive product suite: remediations, assessment experience, and inventory: the three layers that turn Horizon3 ’s product portfolio (Internal, External, Cloud, WebApp, Security Controls, Rapid Response, Tripwires) into one coherent customer journey. Customers experience NodeZero as enumerating their inventory, configuring and scheduling an assessment, and then acting on results. This role involves making every robust user flow discoverable, useful, and valuable end to end, driving hack-fix-verify forward as a single integrated experience.

This role also sits at the seam between Offense and Precision Defense. As Precision Defense builds out blue-team agent capability (auto-remediation, CARE), this PM is responsible for making sure that work lands as one unified experience.

This role reports to the Sr. Manager, Product Management for Offensive Security and will take a leadership role in making remediation, assessment, and inventory a differentiated, horizontal capability across NodeZero.

Responsibilities:

Run Remediations as a Business

Be the CEO of the remediation, assessment, and inventory experience: own its vision, strategy, and priorities, and take accountability for customer outcomes, execution, and commercial success across the portfolio

Own financial performance: set retention, expansion, and net revenue targets tied to hack-fix-verify adoption, and partner with Sales, Customer Success, and Finance to identify and deliver against them

Build and maintain the business plan: where remediation and workflow capability creates the most customer value and revenue, and the investment and tradeoffs required across the engineering teams that build it

Shape pricing and packaging for remediation and integration capability, including upgrade paths and how it lands in the broader NodeZero and Precision Defense offering

Define success metrics and lead regular business reviews covering adoption, time to remediate, retention, expansion, and customer outcomes; explain gaps and drive corrective action

Partner with Marketing on positioning to SecOps and IT buyers, and with Enablement on messaging, demos, battlecards, and ROI narratives that make remediation a reason to buy and renew

Stay ahead of competitors and adjacent categories in remediation, exposure management, and ITSM integration; turn competitive intelligence and win/loss insight into strategy and sales execution changes

Own adoption and value realization with Customer Success: accelerate activation, deepen usage across op types, and use churn analysis to improve retention and uncover expansion

Own Assessment Experience as a Unified, Cross-Op-Type Capability

Own end-to-end design of assessment configuration, scheduling, and authorization across all op types (Internal, External, Cloud, WebApp) as one coherent experience, not fragmented per-domain screens

Partner with each op-type PM (Don, Michael, Shane, Ann, Jordan) and their EMs to define what's shared-service (scheduling, templates, authorization) vs. domain-specific (op-type config), and hold the line on consistency across all of them

Own inventory as a shared, cross-op-type object; how customers enumerate and understand their asset; partnering with the op-type teams who attack that inventory rather than owning attack logic itself

Track config/scheduling friction (support tickets, SE escalations, field feedback) to prioritize the highest-leverage consistency gaps

Own the Unified Product Experience Experience and Drive Hack-Fix-Verify

Own the unified product experience product surface end to end

Validate what customers actually want before committing roadmap: hack-fix-verify is the validated end-state; auto-remediation demand is not yet proven. Roadmap decisions should follow evidence, not assumption

Own ticketing/ITSM integrations (JIRA and similar) as part of the same flow that surfaces remediation guidance; a customer's path to a fixed finding should not live on a different tab than the finding itself

Define the requirements-side handoff to engineering for remediation work, in a structure that avoids splitting ownership of one customer-facing flow across multiple teams

Partner with Precision Defense to Layer in New Experiences

Serve as the offense-side product counterpart to Precision Defense's blue-team agent platform continuous autonomous remediation; co-own the decision of what auto-remediation capability ships and how it's exposed

Prevent a bifurcated offense/defense experience: any blue-team agent capability that touches remediation must land inside the same customer flow this role owns, not a parallel one

Bring customer and field signal on what "hack-fix-verify-defend" should look like in product, and translate that into shared requirements with Precision Defense's PM/EM counterparts

Travel Required

Required location: San Francisco Bay Area or New York City

Up to 20% travel required

Qualifications:

Bachelor's degree or equivalent in a technology-related field

8+ years of startup PM experience with technical B2B products

Deep understanding of SecOps and IT teams, their needs, pain points, and market solutions to address those needs/pain points.

Experience owning shared-service or platform capabilities consumed by multiple product teams; comfortable operating without a single dedicated EM counterpart, working across several engineering teams at once

Experience building reporting or evidence-generation products for security, audit, or regulated industries

Technical aptitude — comfortable diving into pentest findings, attack chains, and remediation guidance, and translating them into product requirements<