The Senior Product Owner (Technical) will be responsible for defining, prioritizing, and driving the roadmap for an AI-driven code vulnerability detection and reporting capability. The product uses large language models and supporting automation to identify potential security weaknesses in source code, evaluate detection quality, and integrate actionable results into enterprise security and software development workflows.
This role will collaborate with Information Security, Technology, Application Development, Risk, Compliance, Architecture, Finance, and other key partners to translate business, security, operational, and regulatory requirements into product capabilities and measurable outcomes. The Senior Product Owner will guide a squad of engineers responsible for building, operating, and continuously improving the scanner, evaluation harness, integrations, and supporting telemetry.
Technical knowledge of application security, AI/LLM systems, cloud platforms, and software development practices is strongly preferred.
Responsibilities:
- Define and communicate the product vision, strategy, objectives, and roadmap for the AI-driven code vulnerability detection capability.
- Own and prioritize the product backlog based on security risk, exploitability, regulatory impact, customer value, operational requirements, and engineering capacity.
- Translate business, security, technical, and regulatory needs into clear Features, Stories, acceptance criteria, and measurable outcomes.
- Partner with Information Security Engineering, Application Security, Technology, Architecture, Risk, Compliance, Legal, Finance, Operations, and Lines of Business to define and execute product strategy.
- Guide delivery of the scanner, evaluation harness, CI/CD integrations, reporting capabilities, operational telemetry, and supporting infrastructure.
- Establish product success measures covering detection effectiveness, precision, recall, reproducibility, coverage, adoption, operational reliability, cost, and delivery performance.
- Partner with engineering and security subject matter experts to define evaluation approaches, regression testing, ground-truth datasets, and release acceptance criteria.
- Ensure material changes to models, prompts, agents, detection logic, integrations, or evaluation methods are appropriately tested, documented, reviewed, and governed.
- Prioritize technical debt, reliability improvements, defects, security requirements, and operational enhancements alongside new product capabilities.
- Provide transparency and ongoing communication regarding roadmap priorities, delivery status, risks, dependencies, product performance, and key decisions.
- Collaborate with engineering throughout all phases of development, including analysis, design, implementation, testing, deployment, and ongoing support.
- Coordinate integration of the product with GitHub, CI/CD pipelines, enterprise reporting, security monitoring, and vulnerability management workflows.
- Partner with product consumers and application development teams to understand workflow requirements, validate usability, and improve adoption.
- Define the expected disposition and workflow for scanner outputs while maintaining clear accountability between product operations, finding triage, and remediation ownership.
- Maintain product documentation, operating procedures, control evidence, training materials, and stakeholder communications.
- Maintain a healthy product backlog and actively participate in planning, refinement, prioritization, demonstrations, retrospectives, and other team ceremonies.
- Communicate product capabilities, limitations, roadmap, and performance to technical teams, senior leadership, governance bodies, and other stakeholders.
- Maintain appropriate controls and documentation to support company, audit, regulatory, and Information Security requirements.
Required Skills:
- 4+ years of related product ownership, product management, information security, software development, or technology delivery experience.
- Experience managing a technical product through design, implementation, deployment, adoption, and ongoing operation.
- Demonstrated ability to define product strategy, maintain a roadmap, manage a backlog, and make prioritization decisions across competing objectives.
- Experience translating technical, security, risk, and business requirements into actionable Features, Stories, acceptance criteria, and product outcomes.
- Working knowledge of software development lifecycles, Git-based development, CI/CD pipelines, APIs, cloud platforms, and production support practices.
- Understanding of application security concepts, common vulnerability classes, vulnerability management workflows, and software security testing.
- General understanding of artificial intelligence and large language model concepts, including model limitations, prompt or agent behavior, evaluation, and the importance of human review.
- Ability to interpret product metrics and evaluation results, including precision, recall, false-positive rates, false-negative rates, reproducibility, coverage, and operational reliability.
- Ability to evaluate tradeoffs among security risk reduction, customer experience, engineering effort, cost, operational support, and regulatory impact.
- Experience working in Agile or SAFe development environments.
- Strong written and verbal communication skills, with the ability to explain technical concepts, product decisions, risks, and limitations to different audiences.
- Ability to influence decisions and build alignment across engineering, security, risk, governance, and business stakeholders without direct authority.
- Strong analytical skills, intellectual curiosity, and structured problem-solving ability.
- Self-motivated and able to work independently and across multiple teams in a fast-paced, highly regulated environment.
Preferred Skills:
- Product ownership experience for an application security, vulnerability management, developer security, cloud security, or AI-enabled product.
- Experience with SAST, SCA, software composition, or vulnerability detection capabilities.
- Familiarity with AWS hosted AI services or equivalent enterprise LLM platforms.
- Familiarity with GitHub, Jenkins, Infrastructure as Code, containerized workloads, and cloud-native architectures.
- Experience defining evaluation frameworks or quality measures for probabilistic or AI-enabled systems.
- Experience implementing products within a regulated financial services environment.
- Experience supporting audit, compliance, model governance, risk assessment, or control-evidence requirements.
- Relevant certifications in product management, Agile, SAFe, cloud technology, artificial intelligence, or information security.
By applying for a job with SGA, you agree to allow SGA to process your application for this and future opportunities in accordance with our Privacy Policy. Also, to ensure timely processing, you agree to be contacted by our AI recruiter via email, text, or phone. Message frequency varies and data rates may apply, but you can reply STOP to any SMS message to opt-out of texts and may contact SGA at to opt-out of AI communications. The choice not to engage with AI will not adversely impact your consideration for placement. AI is not used to make any hiring determinations.
SGA is a technology and resource solutions provider driven to stand out. We are a women-owned business. Our mission: to solve big IT problems with a more personal, boutique approach. Each year, we match consultants like you to more than 1,000 engagements. When we say let's work better together, we mean it. You'll join a diverse team built on these core values: customer service, employee development, and quality and integrity in everything we do. Be yourself, love what you do and find your passion at work. Please find us at .
SGA is an Equal Opportunity Employer and does not discriminate on the basis of Race, Color, Sex, Sexual Orientation, Gender Identity, Religion, National Origin, Disability, Veteran Status, Age, Marital Status, Pregnancy, Genetic Information, or Other Legally Protected Status. We are committed to providing access, equal opportunity, and reasonable accommodation for individuals with disabilities in employment, and our services, programs, and activities. Please visit our company to request an accommodation or assistance regarding our policy.
Never miss an opportunity! Create an alert based on the job you applied for.