Senior Director of Product Management, Endpoint Security & XDR

Skills this role screens for

About the role

Elastic, the Search AI Company, enables everyone to find the answers they need in real time, using all their data, at scale — unleashing the potential of businesses and people. The Elastic Search AI Platform, used by more than 50% of the Fortune 500, brings together the precision of search and the intelligence of AI to enable everyone to accelerate the results that matter. By taking advantage of all structured and unstructured data — securing and protecting private information more effectively — Elastic’s complete, cloud-based solutions for search, security, and observability help organizations deliver on the promise of AI.

What is The Role

Elastic Security is hiring a Senior Director of Product Management to lead our Endpoint Security & XDR business. This role reports to the GM of Elastic Security. You will be paired with our most senior engineering leader, a VP who leads all of Elastic Security engineering and whose day-to-day focus is endpoint, sharing accountability for the line's outcomes with you. You will also peer with the product lead of our SIEM and analytics business as we build one platform together. The endpoint is where we meet the adversary directly, and where the people we serve, the analysts and defenders protecting hospitals, banks, and government networks, need us most. Their mission is our mission, and this role carries that responsibility for the endpoint and XDR market. Like Elastic itself, the role is distributed by design.

This business was born when Elastic acquired Endgame in 2019, a pioneer in endpoint prevention, detection, and response with roots in defending national security networks. We extended that protection philosophy to Linux and cloud-native environments with the Cmd acquisition in 2021. The result today is Elastic Defend, and its record in independent testing reflects the quality of the work: Elastic Security was the only vendor to score 100% protection in both the AV-Comparatives Real-World and Malware Protection Tests for all of 2025, and the only vendor among 16 to earn a perfect malware protection score in the 2026 Business Security Test, with zero false alarms on the software businesses actually run. And unlike most of this market, we do that work in the open: our protection artifacts and detection rules are public for anyone to inspect.

This role is open for a straightforward reason. Our product leader is retiring, and we are organizing product management around our two core businesses: SIEM and analytics, which will be led by a proven leader already at Elastic, and endpoint, where we are looking outside for someone who brings a fresh perspective from this market. The timing is deliberate in another way as well: security operations are shifting toward agentic workflows, and as a challenger in this market we can move faster than the incumbents. Our focus with this role is business expertise: we are looking for a business owner who understands endpoint security deeply and who will grow this line with the care of someone who owns the outcome. You will have genuine room to lead. The strategy, the priorities, and how we compete are yours to shape with your engineering partner.

The work

What You Will Be Doing

• Drive the business-driven OKRs for the Endpoint Security & XDR line: revenue contribution, competitive win rate, platform attach, retention, and expansion.
• Set the product strategy for the line and represent it with sales leadership, customers, and analysts: a clear diagnosis of the market, a guiding policy, and coherent actions that follow from it.
• Own the agentic detection and response strategy for the endpoint: where AI-driven and autonomous capabilities genuinely help prevention, detection, and response at the edge, working closely with the SIEM and analytics line so customers experience one agentic platform, not two roadmaps.
• Shape where we invest and where we choose not to, building the case with data and customer evidence.
• Own how endpoint and XDR fit the broader Elastic Security platform story, so a customer who lands with endpoint expands into the platform and a SIEM customer sees why our endpoint belongs next to it.
• Put customers first. Visit them where they are, participate in deals and win/loss reviews, enable the field, and represent Elastic at tradeshows and industry events. This work requires regular travel.
• Partner with your engineering counterpart as a true pair, sharing one set of outcomes for the line.
• Lead and develop a team of product managers, helping each of them connect their work to the customer's mission and the business.

Who they want

What You Bring

• Genuine care for the people this product protects. Customers can tell whether the person across the table is invested in their mission, and this business runs on the trust you earn by caring consistently over time.
• Business expertise running a product line or business unit in security, with comfort in the full picture: revenue, win rates, retention, pricing and packaging, and competitive positioning.
• Earned credibility in endpoint security: EPP, EDR, XDR, and enough understanding of what an agent does on a machine to have real conversations with engineers and practitioners.
• A strong working partnership with go-to-market teams, including experience enabling sellers and supporting deals alongside the field.
• A habit of deciding with evidence: win/loss data, customer conversations, and market signals inform your calls.
• A point of view on how a challenger competes and differentiates against well-funded incumbents.
• Clear executive communication with executive leadership, CISOs, sales leadership, and industry analysts.

Nice to have

Bonus Points

Compensation for this role is in the form of base salary. This role does not have a variable compensation component.

The typical starting salary range for new hires in this role is listed below. In select locations (including Seattle WA, Los Angeles CA, the San Francisco Bay Area CA, and the New York City Metro Area), an alternate range may apply as specified below.

These ranges represent the lowest to highest salary we reasonably and in good faith believe we would pay for this role at the time of this posting. We may ultimately pay more or less than the posted range, and the ranges may be modified in the future.

An employee's position within the salary range will be based on several factors including, but not limited to, relevant education, qualifications, certifications, experience, skills, geographic location, performance, and business or organizational needs.

Elastic believes that employees should have the opportunity to share in the value that we create together for our shareholders. Therefore, in addition to cash compensation, this role is currently eligible to participate in Elastic's stock program. Our total rewards package also includes a company-matched 401k with dollar-for-dollar matching up to 6% of eligible earnings, along with a range of other benefits offered with a holistic emphasis on employee well-being.…

• Experience competing with or working at endpoint-focused security vendors, with perspective on the strengths and gaps across the market.
• Experience helping a security business scale from a few hundred million toward $1B.
• Familiarity with public efficacy testing (AV-Comparatives, MITRE ATT&CK evaluations) and how to participate in the open.
• Experience serving customers in hard environments: regulated industries, classified networks, air-gapped and OT deployments.
• A thoughtful position on AI and agentic capabilities at the endpoint, with healthy skepticism of silver bullets and a clear sense of where they genuinely help the defender.
• Contributions to open source or the security community. Our work is public, and we value people who build in the open.