Job description

SpyCloud is on a mission to make the internet a safer place by disrupting the criminal underground. SpyCloud’s solutions thwart cyberattacks and protect more than 4 billion accounts worldwide. Cybersecurity is an exciting, evolving space, and being at the forefront of the fight to disrupt cybercrime makes SpyCloud a special place to work. If you’re driven to align your career with a fantastic mission, look no further! As the Product Manager, Investigations, you will own the delivery of key capabilities in SpyCloud’s Investigations product line. Security teams, fraud analysts, investigators, and threat intelligence professionals use Investigations to uncover, understand, and act on cybercriminal activity using SpyCloud’s recaptured darknet data. Reporting to the Director of Product, Enterprise & Investigations, and working closely with the Principal Product Manager, Investigations, you will turn product strategy into shipped capabilities that customers rely on. This is a hands-on, highly cross-functional role. You will work daily with Engineering, Design, and Data Science, and partner with SpyCloud Labs, Threat Intelligence, Customer Success, and Go-to-Market teams. The Investigations roadmap is ambitious, and you will own a meaningful share of it, from discovery through launch and adoption. As an AI-forward company, SpyCloud expects you to build AI into the product and into how you work, using it to gather, organize, prioritize, and define requirements. What You'll Do: Manage backlog and delivery for assigned Investigations capabilities, in line with the portfolio strategy set by the Principal PM and Director. Ship AI, machine learning, and automation features that cut manual effort out of investigative workflows, working with Data Science from problem framing through model evaluation and launch. Develop a working understanding of how customers investigate: the data they pivot on, the questions they need answered, and where their workflows break down. Run discovery for your areas through customer interviews, usability testing, and competitive analysis, and turn findings into clear requirements, epics, and user stories. Lead agile execution with your engineering team, including sprint planning, backlog refinement, acceptance criteria, and release readiness. Work with SpyCloud Labs and the Investigations team to turn SpyCloud’s cybercrime data and analytic models into capabilities customers can use directly. Partner with Product Marketing, Sales, Customer Success, and Solutions Engineering on launches, including release notes, enablement, demos, and early customer adoption. Represent your product areas in customer and prospect conversations, and serve as the go-to product expert for internal teams. Make tradeoff calls on customer requests, technical debt, and new capabilities within your scope, and bring larger tradeoffs to the Principal PM and Director with a clear recommendation. Keep your features consistent across the Investigations UI and programmatic interfaces (API, MCP, A2A), in partnership with the Principal PM, who owns portfolio cohesion. Track developments in AI, threat intelligence, fraud, identity, and digital investigations, and bring relevant opportunities back to the team. Requirements: Educational Background Bachelor’s degree in Computer Science, Engineering, Information Systems, Business, or a related discipline, or equivalent practical experience. Professional Experience 2+ years of product management experience, including ownership of features or products in an enterprise SaaS environment. Track record of shipping complex technical features from discovery through launch with engineering and design teams. Experience building products for cybersecurity, fraud prevention, digital identity, threat intelligence, investigations, or adjacent security domains. Experience shipping AI/ML-powered features, including work with data science teams on model-driven capabilities. Experience working directly with enterprise or government customers to understand workflows and validate product decisions. Experience supporting product launches with Product Marketing, Sales, and Customer Success. Currently holds, or is capable of obtaining, a US government Top Secret security clearance. Technical Proficiency Knowledge of identity security, account takeover, malware ecosystems including infostealers, credential theft, or criminal underground marketplaces. Comfortable with APIs, MCP, data platforms, search technologies, and AI-assisted workflows. Enough depth in enterprise SaaS architecture and modern development practices to work through technical tradeoffs with engineers. Ability to interpret product analytics, model performance data, and customer usage data. Experience with Linear, JIRA, Confluence, Productboard, Figma, or similar tools. Power user of AI tools, including LLMs, for research, requirements, and prioritization. Skills Strong product judgment, with the ability to break a roadmap into well-scoped, shippable increments. Clear, concise written and verbal communication, and comfort presenting to customers and senior leaders. Strong attention to detail. Analytical and problem-solving skills with a customer-first mindset. Sound decision-making with incomplete information in a fast-moving environment. Builds trust and alignment across technical, data science, and business teams without direct authority. Working familiarity with AI/ML concepts, including model lifecycle, data pipelines, and evaluation metrics. Work Environment Ability to work effectively in a remote-first, highly collaborative environment. Occasional travel for customer meetings, industry events, and internal planning sessions. Nice to Have: Prior experience as a threat intelligence analyst, fraud investigator, or SOC analyst. 2+ years of experience in cybersecurity, threat intelligence, digital investigations, fraud, or security operations. Working knowledge of cybersecurity operations, threat intelligence platforms, digital investigations, or identity intelligence. Familiarity with cybercrime investigations, digital forensics, fraud operations, or security operations center (SOC) workflows. Active Top Secret security clearance. Experience with link analysis or graph-based investigation tools. Exposure to SIEM, SOAR, or threat intelligence platform (TIP) integrations. Experience building agentic AI workflows or products on MCP. Base Salary Range: $115,000 – $150,000 The salary range reflects the expected base compensation for a fully qualified candidate at this level based on experience, qualifications, and market data at the time of posting. U.S.-Based Benefits + Perks (for Full Time Employees): At SpyCloud, we are committed to working alongside individuals who are equally passionate about preventing cybercrime, regardless of their department or role. Guided by our core values in all business decisions, we prioritize unity in our mission and ensure all SpyCloud employees have the support and benefits they need to stay focused on our goals. In addition to our engaging workspace in South Austin, flexible and remote-friendly work options, and competitive salary package, we offer our employees a comprehensive benefits package that includes: 401(k) with Employer Contribution Health, Vision, and Dental Insurance Health Savings Account (HSA) available with Employer Contribution Employer Paid Life, Short-term, and Long-term Disability Insurance Generous PTO Plan and 16 paid holidays per year U.K.-Based Benefits + Perks (for Full Time Employees): Retirement Savings Plan with Employer Contribution Employer Provided Private Health Insurance and Healthcare Cashplan Employer Paid Life Insurance, Income Replacement, and Critical Illness Protection Employee Assistance Program 25 days annual accrued holiday plus 8 paid bank holidays and a paid company shutdown during winter holidays About SpyCloud: SpyCloud transforms recaptured darknet data to disrupt cybercrime. Its automated identity threat protection solutions use advanced analytics and AI to accelerate investigations and protect workforce, consumer, and supplier identities from the threats that matter most: authentication bypass, session hijacking, malicious insiders, account takeover, ransomware, and fraud. Its data from malware-infected devices, successful phishes, combolists, and third-party breaches also powers many popular dark web monitoring and identity theft protection offerings. Customers include 7 of the Fortune 10, along with hundreds of global enterprises, mid-sized companies, and government agencies worldwide. Headquartered in Austin, TX, SpyCloud is home to more than 250 cybersecurity experts whose mission is to protect businesses and consumers from the stolen identity data criminals are using to target them now. To learn more and see insights on your company's exposed data, visit spycloud.com . Our Mission: Our mission is to make the internet a safer place by disrupting the criminal underground. Together with our customers and partners, we aim to end criminals’ ability to profit from stolen information. Who We Are: SpyCloud is a place for innovative, collaborative, and problem-solvers to thrive. Individually, we’re amazing, but together, we’re unstoppable. We celebrate diversity and various perspectives and aim to create an inclusive and supportive environment for all. We are proud to be an Equal Employment Opportunity and Affirmative Action employer of choice. All aspects of employment decisions will be based on merit, performance, and business needs. We do not discriminate on the basis of any status protected under federal, state, or local law. All qualified applicants will receive consideration for employment without regard to race, religion, color, national origin, sex (including pregnancy, childbirth, reproductive health decisions, or related medical conditions), sexual orientation, gender identity, gender expression, age, status as a protected veteran, status as an individual with a disability, genetic information, political views or activity, or other applicable legally protected characteristics. Women, minorities, individuals with disabilities, and protected veterans are encouraged to apply. SpyCloud complies with applicable state and local laws governing nondiscrimination in employment. This policy applies to all terms and conditions of employment, including recruiting, hiring, placement, promotion, termination, layoff, recall, transfer, leaves of absence, compensation, and training. SpyCloud expressly prohibits any form of workplace harassment. Improper interference with the ability of SpyCloud's employees to perform their job duties may result in discipline up to and including discharge. SpyCloud shares the right to work and participates in the E-Verify program in all locations. If you need assistance or accommodation due to a disability, you may contact us. Our Culture: Our culture is something really special. We’re all driven to disrupt the cybercriminal economy as we keep customer accounts safe from compromise. We support a truly worthy and serious mission, but we have fun doing it together. If you are driven, inventive, and collaborative, you’ll fit right in. SpyCloud’s Recruitment Policy: We will never ask an applicant for sensitive or personal financial information during the recruitment process. We advise all applicants seeking employment with SpyCloud to review available information on recruitment fraud. Anyone who suspects that they have been contacted by someone falsely representing SpyCloud should email careers@spycloud.com . Compensation Transparency Policy: At SpyCloud, we believe in transparency and fairness in compensation. We strive to ensure that all employees are fairly compensated for their contributions, and we openly discuss our compensation philosophy and structure. We are committed to providing competitive salaries and benefits packages to attract and retain top talent, and we encourage open dialogue and feedback regarding compensation matters. Learn more and apply: SpyCloud Careers SpyCloud is not sponsoring visas at this time. For applicants residing in California, please click here to read SpyCloud's CCPA Notice. For applicants residing in the UK, please click here to read SpyCloud's Employee Privacy Notice.

Requirements

Must-haves

As an AI-forward company, SpyCloud expects you to build AI into the product and into how you work, using it to gather, organize, prioritize, and define requirements.
Manage backlog and delivery for assigned Investigations capabilities, in line with the portfolio strategy set by the Principal PM and Director.
Ship AI, machine learning, and automation features that cut manual effort out of investigative workflows, working with Data Science from problem framing through model evaluation and launch.
Develop a working understanding of how customers investigate: the data they pivot on, the questions they need answered, and where their workflows break down.
Run discovery for your areas through customer interviews, usability testing, and competitive analysis, and turn findings into clear requirements, epics, and user stories.
Lead agile execution with your engineering team, including sprint planning, backlog refinement, acceptance criteria, and release readiness.
Work with SpyCloud Labs and the Investigations team to turn SpyCloud’s cybercrime data and analytic models into capabilities customers can use directly.
Partner with Product Marketing, Sales, Customer Success, and Solutions Engineering on launches, including release notes, enablement, demos, and early customer adoption.
Represent your product areas in customer and prospect conversations, and serve as the go-to product expert for internal teams.
Make tradeoff calls on customer requests, technical debt, and new capabilities within your scope, and bring larger tradeoffs to the Principal PM and Director with a clear recommendation.
Keep your features consistent across the Investigations UI and programmatic interfaces (API, MCP, A2A), in partnership with the Principal PM, who owns portfolio cohesion.
Track developments in AI, threat intelligence, fraud, identity, and digital investigations, and bring relevant opportunities back to the team.

Nice-to-haves

Prior experience as a threat intelligence analyst, fraud investigator, or SOC analyst.
Working knowledge of cybersecurity operations, threat intelligence platforms, digital investigations, or identity intelligence.
Familiarity with cybercrime investigations, digital forensics, fraud operations, or security operations center (SOC) workflows.
Active Top Secret security clearance.
Experience with link analysis or graph-based investigation tools.
Exposure to SIEM, SOAR, or threat intelligence platform (TIP) integrations.
Experience building agentic AI workflows or products on MCP.
U.S.-Based Benefits + Perks (for Full Time Employees):
Health Savings Account (HSA) available with Employer Contribution
Employer Paid Life, Short-term, and Long-term Disability Insurance
Generous PTO Plan and 16 paid holidays per year
U.K.-Based Benefits + Perks (for Full Time Employees):

Application prep

Use the role’s language and application details while tailoring your materials.

Keywords to mirror

goaimachine learningagileapimljirafigma

Platform: greenhouse
Effort: quick

Benefits

Benefits detected in the listing.

Health Insurance

Dental

Vision

401(K)

Pto