高级产品管理总监,端点安全与XDR
Senior Director of Product Management, Endpoint Security & XDR
Elastic,搜索人工智能公司,使每个人都能实时使用所有数据找到所需答案,实现规模化的信息检索——释放企业和个人的潜力。Elastic 搜索人工智能平台被超过 50% 的财富 500 强企业使用,将搜索的精准性和人工智能的智能结合,使每个人都能加速实现关键成果。通过利用所有结构化和非结构化数据——更有效地保障和保护隐私信息——Elastic 基于云的完整解决方案在搜索、安全和可观测性领域,帮助组织实现人工智能的承诺。
#### **职位描述**
Elastic Security 正在招聘一位高级产品总监,负责我们的端点安全与 XDR 业务。该职位向 Elastic Security 总经理汇报。你将与我们最资深的工程负责人——一位负责所有 Elastic Security 工程的副总裁——配对工作,这位副总裁日常工作的重点是端点,与你共同承担该业务线的成果责任。你还将与我们 SIEM 和分析业务的产品负责人平级协作,因为我们正在一起构建一个统一的平台。端点是我们直接面对威胁的地方,也是我们服务的用户——保护医院、银行和政府网络的分析师和防御者——最需要我们的地方。他们的使命就是我们的使命,这个职位负责端点和 XDR 市场的这一责任。就像 Elastic 本身一样,这个职位是按设计分布式的。
这项业务始于 2019 年 Elastic 收购 Endgame,这是一家在端点预防、检测和响应领域的先驱,其根源在于保护国家安全网络。2021 年,我们通过收购 Cmd 将这种保护理念扩展到 Linux 和云原生环境。如今的结果是 Elastic Defend,其在独立测试中的表现反映了工作的质量:Elastic Security 是唯一一家在 2025 年 AV-Comparatives 真实世界和恶意软件保护测试中获得 100% 保护率的供应商,并且是 16 家供应商中唯一一家在 2026 年企业安全测试中获得完美恶意软件保护分数的供应商,且在实际运行的软件企业中没有误报。与其他大多数市场不同,我们在公开环境下完成这些工作:我们的保护工件和检测规则都是公开的,任何人都可以查看。
这个职位开放的原因很简单。我们的产品负责人即将退休,我们将围绕我们的两个核心业务:SIEM 和分析进行产品管理重组。
查看英文原文
Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.
#### **What is The Role**
Elastic Security is hiring a Senior Director of Product Management to lead our Endpoint Security & XDR business. This role reports to the GM of Elastic Security. You will be paired with our most senior engineering leader, a VP who leads all of Elastic Security engineering and whose day-to-day focus is endpoint, sharing accountability for the line's outcomes with you. You will also peer with the product lead of our SIEM and analytics business as we build one platform together. The endpoint is where we meet the adversary directly, and where the people we serve, the analysts and defenders protecting hospitals, banks, and government networks, need us most. Their mission is our mission, and this role carries that responsibility for the endpoint and XDR market. Like Elastic itself, the role is distributed by design.
This business was born when Elastic acquired Endgame in 2019, a pioneer in endpoint prevention, detection, and response with roots in defending national security networks. We extended that protection philosophy to Linux and cloud-native environments with the Cmd acquisition in 2021. The result today is Elastic Defend, and its record in independent testing reflects the quality of the work: Elastic Security was the only vendor to score 100% protection in both the AV-Comparatives Real-World and Malware Protection Tests for all of 2025, and the only vendor among 16 to earn a perfect malware protection score in the 2026 Business Security Test, with zero false alarms on the software businesses actually run. And unlike most of this market, we do that work in the open: our protection artifacts and detection rules are public for anyone to inspect.
This role is open for a straightforward reason. Our product leader is retiring, and we are organizing product management around our two core businesses: SIEM and analytics, which will be led by a proven leader already at Elastic, and endpoint, where we are looking outside for someone who brings a fresh perspective from this market. The timing is deliberate in another way as well: security operations are shifting toward agentic workflows, and as a challenger in this market we can move faster than the incumbents. Our focus with this role is business expertise: we are looking for a business owner who understands endpoint security deeply and who will grow this line with the care of someone who owns the outcome. You will have genuine room to lead. The strategy, the priorities, and how we compete are yours to shape with your engineering partner.
#### What You Will Be Doing
- Drive the business-driven OKRs for the Endpoint Security & XDR line: revenue contribution, competitive win rate, platform attach, retention, and expansion.
- Set the product strategy for the line and represent it with sales leadership, customers, and analysts: a clear diagnosis of the market, a guiding policy, and coherent actions that follow from it.
- Own the agentic detection and response strategy for the endpoint: where AI-driven and autonomous capabilities genuinely help prevention, detection, and response at the edge, working closely with the SIEM and analytics line so customers experience one agentic platform, not two roadmaps.
- Shape where we invest and where we choose not to, building the case with data and customer evidence.
- Own how endpoint and XDR fit the broader Elastic Security platform story, so a customer who lands with endpoint expands into the platform and a SIEM customer sees why our endpoint belongs next to it.
- Put customers first. Visit them where they are, participate in deals and win/loss reviews, enable the field, and represent Elastic at tradeshows and industry events. This work requires regular travel.
- Partner with your engineering counterpart as a true pair, sharing one set of outcomes for the line.
- Lead and develop a team of product managers, helping each of them connect their work to the customer's mission and the business.
#### What You Bring
- Genuine care for the people this product protects. Customers can tell whether the person across the table is invested in their mission, and this business runs on the trust you earn by caring consistently over time.
- Business expertise running a product line or business unit in security, with comfort in the full picture: revenue, win rates, retention, pricing and packaging, and competitive positioning.
- Earned credibility in endpoint security: EPP, EDR, XDR, and enough understanding of what an agent does on a machine to have real conversations with engineers and practitioners.
- A strong working partnership with go-to-market teams, including experience enabling sellers and supporting deals alongside the field.
- A habit of deciding with evidence: win/loss data, customer conversations, and market signals inform your calls.
- A point of view on how a challenger competes and differentiates against well-funded incumbents.
- Clear executive communication with executive leadership, CISOs, sales leadership, and industry analysts.
#### Bonus Points
- Experience competing with or working at endpoint-focused security vendors, with perspective on the strengths and gaps across the market.
- Experience helping a security business scale from a few hundred million toward $1B.
- Familiarity with public efficacy testing (AV-Comparatives, MITRE ATT&CK evaluations) and how to participate in the open.
- Experience serving customers in hard environments: regulated industries, classified networks, air-gapped and OT deployments.
- A thoughtful position on AI and agentic capabilities at the endpoint, with healthy skepticism of silver bullets and a clear sense of where they genuinely help the defender.
- Contributions to open source or the security community. Our work is public, and we value people who build in the open.
Compensation for this role is in the form of base salary. This role does not have a variable compensation component. The typical starting salary range for new hires in this role is listed below.
These ranges represent the lowest to highest salary we reasonably and in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the ranges may be modified in the future.
An employee's position within the salary range will be based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs.
Elastic believes that employees should have the opportunity to share in the value that we create together for our shareholders. Therefore, in addition to cash compensation, this role is currently eligible to participate in Elastic's stock program. Our total rewards package also includes a company-matched Registered Retirement Savings Plan (RRSP) with dollar-for-dollar matching up to 6% of eligible earnings, along with a range of other benefits offered with a holistic emphasis on employee well-being.
The typical starting salary range for this role is:
$192,500—$304,500 CAD
### **Additional Information - We Take Care of Our People**
As a distributed company, diversity drives our identity. Whether you’re looking to launch a new career or grow an existing one, Elastic is the type of company where you can balance great work with great life. Your age is only a number. It doesn’t matter if you’re just out of college or your children are; we need you for what you can do.
We strive to have parity of benefits across regions and while regulations differ from place to place, we believe taking care of our people is the right thing to do.
- Competitive pay based on the work you do here and not your previous salary
- Health coverage for you and your family in many locations
- Ability to craft your calendar with flexible locations and schedules for many roles
- Generous number of vacation days each year
- Increase your impact - We match up to $2000 (or local currency equivalent) for financial donations and service
- Up to 40 hours each year to use toward volunteer projects you love
- Embracing parenthood with minimum of 16 weeks of parental leave
Different people approach problems differently. We need that. Elastic is an equal opportunity employer and is committed to creating an inclusive culture that celebrates different perspectives, experiences, and backgrounds. Qualified applicants will receive consideration for employment without regard to race, ethnicity, color, religion, sex, pregnancy, sexual orientation, gender perception or identity, national origin, age, marital status, protected veteran status, disability status, or any other basis protected by federal, state or local law, ordinance or regulation.
We welcome individuals with disabilities and strive to create an accessible and inclusive experience for all individuals. To request an accommodation during the application or the recruiting process, please email [candidate_accessibility@elastic.co](mailto:candidate_accessibility@elastic.co). We will reply to your request within 24 business hours of submission.
Applicants have rights under Federal Employment Laws, view posters linked below: [Family and Medical Leave Act (FMLA)](https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/fmlaen.pdf) Poster;[Pay Transparency Nondiscrimination Provision](https://www.dol.gov/sites/dolgov/files/ofccp/pdf/pay-transp_%20English_formattedESQA508c.pdf) Poster; [Employee Polygraph Protection Act (EPPA)](https://www.dol.gov/sites/dolgov/files/WHD/legacy/files/eppabw.pdf) Poster and [Know Your Rights](https://www.dol.gov/sites/dolgov/files/OFCCP/regs/compliance/posters/pdf/22-088_EEOC_KnowYourRights.pdf) (Poster)
Elasticsearch develops and distributes technology and information that is subject to U.S. and other countries’ export controls and licensing requirements for individuals who are located in or are nationals of the following sanctioned countries and regions: Belarus, Cuba, Iran, North Korea, Syria, or Russia, including the Ukrainian territories annexed by Russia (The Crimea region of Ukraine, The Donetsk People's Republic (DNR), The Luhansk People's Republic (LNR), Kherson or Zaporizhzhia). If you are located in or are a national of one of the listed countries or regions, an export license may be required as a condition of your employment in this role. Please note that national origin and/or nationality do not affect eligibility for employment with Elastic.
Please see [here](https://www.elastic.co/legal/applicant-privacy-statement) for our Privacy Statement.