Be part of the team that defends the networks the world depends on
Corelight defends the world’s most sensitive networks—from global commerce to national defense—quietly, relentlessly, and with resolve. As cyber threats grow faster and smarter, we serve as the trusted force behind network resilience, putting elite defense within reach.
By transforming digital footprints from physical, virtual, and cloud networks into actionable insights, we empower defenders to illuminate blind spots and stay ahead of an evolving threat landscape. Built on open-source innovations and fueled by industry leading agentic AI technology, Corelight helps teams to detect advanced threats and close cases with unprecedented clarity and precision.
Corelight is entering a new phase where AI scales network telemetry to support modern Security Operations Centers (SOCs). As the Senior Product Manager for the AI Product Team focusing on Knowledge, Context, and Ecosystem, you will own the data enrichment layer that supports both human analysts and automated AI tools. By integrating context from EDRs, CMDBs, and identity management systems, you will organize raw network telemetry into structured operational insights. Your work will help drive our Agentic Triage features, automating manual investigation paths and enabling security operations teams to respond to threats with greater speed and clarity.
Specific Responsibilities:
- Manage the Knowledge Layer Roadmap: Define and execute the product roadmap for our security context engine, ensuring contextual data supports human and automated workflows.
- Develop AI & Automated Workflows: Build out data-delivery capabilities that support LLM-powered security workflows, enabling automated tools to assist in reliable triage outcomes.
- Design Alert Prioritization Engines: Create customizable data-prioritization engines with robust defaults, giving enterprise teams granular control over their alert telemetry.
- Build Ecosystem & Partner Integrations: Lead integration strategies across external security tools to pull context from EDR, CMDB, and IAM infrastructure.
- Conduct Customer Discovery Loops: Work closely with SOC Managers, CISOs, and security teams to validate policy workflows and ensure the data layer maps to real operational needs.
- Author Functional Technical Requirements: Write clear Product Requirement Documents (PRDs) and user stories, collaborating with Engineering and UX teams to deliver scalable SaaS solutions.
- Deliver Operational & Executive Reporting: Design dashboards and tracking frameworks that help SOC leadership evaluate detection accuracy and regulatory compliance.
Knowledge/Skills/Abilities needed to be successful:
- AI & LLM Workflows: Solid understanding of automated AI assistants, LLM integration patterns, prompting workflows, and technical knowledge representation.
- SOC Domain Knowledge: Strong understanding of standard Security Operations Center processes, alert triage, threat hunting, and validation workflows.
- Network Security Foundations: Familiarity with network visibility metrics, network telemetry collections (like IDS/NSM), and baseline protocols.
- Integration & API Familiarity: Understanding of how data contracts and schemas integrate across security tooling environments (EDR, IAM, CMDB).
- Structured Product Discovery: Ability to perform continuous customer discovery and translate qualitative feedback into data-backed requirements.
- Policy & Compliance Mapping: Experience translating corporate security guidelines and user permissions into functional software controls.
- Agile Product Management: Competency managing feature lifecycles, sprint plans, and release cycles in an active Agile/Scrum framework.
- Cross-Functional Collaboration: Proven ability to build consensus and drive projects forward across Engineering, UX Design, Marketing, and Sales.
- Stakeholder Communication: Strong written and verbal skills to articulate product updates and technical tradeoffs clearly to enterprise customers and CISOs.
- User-Centric Focus: A practical commitment to reducing user friction and designing features that ease the day-to-day work of security analysts.
Qualifications/Requirements:
- Cybersecurity Experience: 5+ years of experience in cybersecurity, with a focus on asset intelligence, data enrichment, or SOC operations engineering.
- Product Management Track Record: 3+ years of direct experience as a Product Manager or Product Owner, with clear success using data-driven workflows and customer discovery.
- Enterprise Engagement Exposure: Proven background interacting directly with corporate IT and security leadership (CISOs, SOC managers, compliance teams).
- SaaS Tech Familiarity: Hands-on experience working with AI tool setups, data policy controls, or shipping multi-tenant cloud-based SaaS security products.
- Education: Bachelor's degree in Computer Science, Engineering, Cybersecurity, or a related technical field (or equivalent practical enterprise experience).
- Preferred Assets: Prior experience as a Product Owner in an Agile/Scrum setup; familiarity with data analytics infrastructure; comfort using OpenAPI specifications to understand backend endpoints.
Why Join Us?
Fueled by investments from top-tier venture capital organizations such as Crowdstrike, Accel and Insight, Corelight is one of the fastest growing network detection and response platforms in the industry. Our passionate team thrives in a collaborative, inclusive, and geographically distributed culture. We embrace diverse perspectives, neurodiversity, curiosity and low ego results - fostering an environment where every innovator can solve the toughest challenges in cybersecurity and contribute their best work.
We are looking forward to meeting you. Check us out at www.corelight.com
