Product Manager, Investigations

SpyCloud is on a mission to make the internet a safer place by disrupting the criminal underground. SpyCloud’s solutions thwart cyberattacks and protect more than 4 billion accounts worldwide. Cybersecurity is an exciting, evolving space, and being at the forefront of the fight to disrupt cybercrime makes SpyCloud a special place to work. If you’re driven to align your career with a fantastic mission, look no further!

As the Product Manager, Investigations, you will own the delivery of key capabilities in SpyCloud’s Investigations product line. Security teams, fraud analysts, investigators, and threat intelligence professionals use Investigations to uncover, understand, and act on cybercriminal activity using SpyCloud’s recaptured darknet data. Reporting to the Director of Product, Enterprise & Investigations, and working closely with the Principal Product Manager, Investigations, you will turn product strategy into shipped capabilities that customers rely on.

This is a hands-on, highly cross-functional role. You will work daily with Engineering, Design, and Data Science, and partner with SpyCloud Labs, Threat Intelligence, Customer Success, and Go-to-Market teams. The Investigations roadmap is ambitious, and you will own a meaningful share of it, from discovery through launch and adoption.

As an AI-forward company, SpyCloud expects you to build AI into the product and into how you work, using it to gather, organize, prioritize, and define requirements.

What You'll Do:

Manage backlog and delivery for assigned Investigations capabilities, in line with the portfolio strategy set by the Principal PM and Director.

Ship AI, machine learning, and automation features that cut manual effort out of investigative workflows, working with Data Science from problem framing through model evaluation and launch.

Develop a working understanding of how customers investigate: the data they pivot on, the questions they need answered, and where their workflows break down.

Run discovery for your areas through customer interviews, usability testing, and competitive analysis, and turn findings into clear requirements, epics, and user stories.

Lead agile execution with your engineering team, including sprint planning, backlog refinement, acceptance criteria, and release readiness.

Work with SpyCloud Labs and the Investigations team to turn SpyCloud’s cybercrime data and analytic models into capabilities customers can use directly.

Partner with Product Marketing, Sales, Customer Success, and Solutions Engineering on launches, including release notes, enablement, demos, and early customer adoption.

Represent your product areas in customer and prospect conversations, and serve as the go-to product expert for internal teams.

Make tradeoff calls on customer requests, technical debt, and new capabilities within your scope, and bring larger tradeoffs to the Principal PM and Director with a clear recommendation.

Keep your features consistent across the Investigations UI and programmatic interfaces (API, MCP, A2A), in partnership with the Principal PM, who owns portfolio cohesion.

Track developments in AI, threat intelligence, fraud, identity, and digital investigations, and bring relevant opportunities back to the team.

Requirements:

Educational Background

Bachelor’s degree in Computer Science, Engineering, Information Systems, Business, or a related discipline, or equivalent practical experience.

Professional Experience

2+ years of product management experience, including ownership of features or products in an enterprise SaaS environment.

Track record of shipping complex technical features from discovery through launch with engineering and design teams.

Experience building products for cybersecurity, fraud prevention, digital identity, threat intelligence, investigations, or adjacent security domains.

Experience shipping AI/ML-powered features, including work with data science teams on model-driven capabilities.

Experience working directly with enterprise or government customers to understand workflows and validate product decisions.

Experience supporting product launches with Product Marketing, Sales, and Customer Success.

Currently holds, or is capable of obtaining, a US government Top Secret security clearance.

Technical Proficiency

Knowledge of identity security, account takeover, malware ecosystems including infostealers, credential theft, or criminal underground marketplaces.

Comfortable with APIs, MCP, data platforms, search technologies, and AI-assisted workflows.

Enough depth in enterprise SaaS architecture and modern development practices to work through technical tradeoffs with engineers.

Ability to interpret product analytics, model performance data, and customer usage data.

Experience with Linear, JIRA, Confluence, Productboard, Figma, or similar tools.

Power user of AI tools, including LLMs, for research, requirements, and prioritization.

Skills

Strong product judgment, with the ability to break a roadmap into well-scoped, shippable increments.

Clear, concise written and verbal communication, and comfort presenting to customers and senior leaders.

Strong attention to detail.

Analytical and problem-solving skills with a customer-first mindset.

Sound decision-making with incomplete information in a fast-moving environment.

Builds trust and alignment across technical, data science, and business teams without direct authority.

Working familiarity with AI/ML concepts, including model lifecycle, data pipelines, and evaluation metrics.

Work Environment

Ability to work effectively in a remote-first, highly collaborative environment.

Occasional travel for customer meetings, industry events, and internal planning sessions.

Nice to Have:

Prior experience as a threat intelligence analyst, fraud investigator, or SOC analyst.

2+ years of experience in cybersecurity, threat intelligence, digital investigations, fraud, or security operations.

Working knowledge of cybersecurity operations, threat intelligence platforms, digital investigations, or identity intelligence.

Familiarity with cybercrime investigations, digital forensics, fraud operations, or security operations center (SOC) workflows.

Active Top Secret security clearance.

Experience with link analysis or graph-based investigation tools.

Exposure to SIEM, SOAR, or threat intelligence platform (TIP) integrations.

Experience building agentic AI workflows or products on MCP.

Base Salary Range: $115,000 – $150,000

The salary range reflects the expected base compensation for a fully qualified candidate at this level based on experience, qualifications, and market data at the time of posting.

U.S.-Based Benefits + Perks (for Full Time Employees):

At SpyCloud, we are committed to working alongside individuals who are equally passionate about preventing cybercrime, regardless of their department or role. Guided by our core values in all business decisions, we prioritize unity in our mission and ensure all SpyCloud employees have the support and benefits they need to stay focused on our goals. In addition to our engaging workspace in South Austin, flexible and remote-friendly work options, and competitive salary package, we offer our employees a comprehensive benefits package that includes:

401(k) with Employer Contribution

Health, Vision, and Dental Insurance

Health Savings Account (HSA) available with Employer Contribution

Employer Paid Life, Short-term, and Long-term Disability Insurance

Generous PTO Plan and 16 paid holidays per year

U.K.-Based Benefits + Perks (for Full Time Employees):

Retirement Savings Plan with Employer Contribution

Employer Provided Private Health Insurance and Healthcare Cashplan

Employer Paid Life Insurance, Income Replacement, and Critical Illness Protection

Employee Assistance Program

25 days annual accrued holiday plu