Technical Program Manager, Product Security

BeyondTrust is hiring a remote Technical Program Manager, Product Security to anchor the operational engine that carries security findings from discovery to verified fix. If you thrive on driving cross-functional remediation at scale in an AI-first organization, this fully remote Canada-based role puts you at the heart of it.

About the Role

Reporting to the VP of Product Security, you will own the vulnerability remediation lifecycle from end to end — ensuring validated findings are prioritized, tracked, escalated, and driven to closure with accurate reporting. You become the single person who always knows the status of every critical finding, what is blocking it, and who must act next. This position partners daily with Security Architects, the Product Security Engineering Manager, and Product Security Engineers, while coordinating closely with Engineering, Product Management, Customer Support, Customer Trust, and Cyber Defense. The team runs AI-first, so the workflows you build will be powered by Claude and LLM-driven automation across triage routing, status tracking, metrics, reporting, and exception handling.

Key Responsibilities

• Run the full remediation program: set and enforce severity-based SLAs, monitor progress across engineering teams, escalate aging findings, and clear blockers.
• Coordinate third-party penetration tests and the bug bounty program — scoping, scheduling, vendor management, intake, triage, and resolution within committed timelines.
• Build and maintain security kanban boards that act as the organization's single source of truth for internal findings, pen test results, bounty submissions, and exceptions.
• Apply Claude and other LLM platforms to automate intake, routing, status reports, at-risk SLA alerts, stakeholder communications, and pattern detection.
• Manage the security exception process: intake, risk documentation, approval routing, and time-bound tracking through expiration.
• Own Product Security metrics — mean time to remediate, SLA compliance, finding aging, exception counts, recurrence, and coverage — and report to leadership, engineering, and Customer Trust.

Qualifications

• 5+ years in Technical or Security Program Management leading cross-functional security programs.
• Proven ownership of vulnerability management end to end: intake, triage, tracking, SLA enforcement, exceptions, and reporting.
• Experience coordinating pen tests, bug bounties, or external assessments through remediation across multiple teams.
• Hands-on use of LLM platforms (Claude, OpenAI, or similar) to automate program workflows.
• Strong stakeholder management across technical and executive audiences, plus experience building Jira/kanban/dashboard tracking systems.
• Credible understanding of vulnerability severity, risk, and remediation priority. Preferred: Product or Application Security background, AI-native automation, SAST/DAST/SCA familiarity, and GRC or Customer Trust collaboration.

About BeyondTrust

BeyondTrust builds a safer digital world through its cybersecurity SaaS portfolio, supported by a culture of flexibility, trust, and continual learning where your growth and impact are recognized.

How to Apply

To apply, complete your application directly on this page, or you'll be redirected to the employer's application platform to finish submitting there.