Principal Product Manager, Security & Compliance

Role overview

As a Principal Product Manager in GitLab’s Security & Compliance group, you’ll lead at the portfolio level to drive growth and value realization across the Security and Compliance portfolio—especially where it contributes to GitLab Ultimate. You’ll partner with the VP of Product for Security and Compliance and work cross-functionally with product, UX, engineering, and go-to-market teams to connect initiatives into clear customer workflows and portfolio priorities.

Responsibilities

• Lead product strategy across the Security & Compliance portfolio, with a focus on application security testing, to drive cohesive roadmaps and measurable adoption/customer value.
• Own end-to-end definition and delivery of high-impact initiatives such as:
  • Packaging internal security capabilities for customers
  • Strengthening vulnerability research
  • Incubating emerging products from ideation to product-market fit
• Identify gaps and opportunities across teams and connect independent efforts into coherent customer outcomes.
• Establish clear success criteria, ensure on-time delivery, and demonstrate impact on customer security outcomes and product adoption.
• Bring deep application security expertise to shape strategy in areas without clear ownership, including:
  • Turning internal security capabilities/research into customer-facing products
  • Identifying and validating emerging security use cases
  • Guiding ideas from exploration through validation to product-market fit
• Strengthen product-led partnerships with external vendors when they expand customer value.
• Elevate product decision quality by coaching and reviewing PM work that materially impacts portfolio outcomes (problem framing, requirements, go-to-market thinking, escalation handling).
• Use AI-native workflows (e.g., GitLab Duo and lightweight prototyping) to accelerate discovery, validation, and communication.

Examples of initiatives

• Convert internal security tools, practices, and research into differentiated, customer-facing capabilities within GitLab’s DevSecOps platform.
• Create a repeatable path from early Security & Compliance innovation ideas to validated products ready for broader investment and scale.