Principal Product Manager, Security
1Password · Remote · Remote (United States | Canada) ·
COMPENSATION
€•• – ••k
Listed on the employer's job board (Ashby)
- Principal level role
- Fully remote (home country)
- Security & Cryptography focus
- AI security strategy
- Travel required for offsites
As a Principal Product Manager, you will shape the security roadmap for 1Password’s enterprise platform. You will partner with feature teams to integrate security requirements early and translate technical needs into clear priorities. Your work ensures that cryptographic foundations and authentication systems remain robust while maintaining usability for millions of users.
What you'll do
- Partner with product teams to identify security requirements before designs are finalized
- Translate feature-team needs into prioritized work for Security Engineering
- Own the platform-level security roadmap including key management and recovery
- Define strategy for agentic access to credentials and AI agent secrets
- Balance real-world risk against user friction using telemetry and threat models
- Represent the company to the security community and engage with researchers
- Coach product managers on security thinking and challenge assumptions
What you'll need
- 10+ years of product management experience in SaaS or security-critical platforms
- Deep knowledge of cryptography, authentication, and zero-knowledge system design
- Fluency in credential standards such as passkeys and WebAuthn/FIDO
- Ability to read technical specifications and cryptographic design documents
- Track record of earning credibility with security engineering teams
- Experience making and defending risk-based tradeoffs to executives and engineers
- History of shipping security features that achieve high user adoption
- Strong communication skills scaling from research papers to executive briefings
Nice to have
- Active standing in the security community through talks or publications
- Hands-on experience with AI security and prompt injection mitigation
- Familiarity with compliance regimes like SOC 2, FedRAMP, or FIPS
- Background in vulnerability disclosure or incident response
- Experience working with bug bounty programs or researcher communities
Stack
- Cryptography
- Zero-knowledge architecture
- WebAuthn
- FIDO
- Passkeys
- MCP protocols
How you'll work
- Remote-first culture based in your home country
- Travel required for annual offsites and team meetings
- USA or Canada based roles specified for salary bands
- Background check required upon offer acceptance
What you get
- Competitive health, dental, and retirement matching programs
- Generous paid time off policy
- Equity grants via RSU program
- Annual bonus potential
- Free 1Password account
- Paid volunteer days and peer recognition rewards