Want to know if this job is worth applying to?
Greater London, England, United Kingdom
Remote only
Menlo Security is the leader in Browser Security for human and agentic workforces. Our mission is to enable humans and agents to connect, communicate, and collaborate securely, without compromise. The Menlo Browser Security Platform protects organizations from cyberattacks by stopping threats across the web, documents, and email before they reach the user. With Menlo Agent Runtime Security (MARS), that protection now extends to the AI agents working alongside every employee. Menlo Security is trusted by major global businesses, including Fortune 500 companies and government agencies, to protect their most valuable asset, their data, and is backed by top-tier investors.
About the Role
Summary
Menlo Security is building MARS for Agents (Menlo Agent Runtime Security), our product line for securing autonomous and hybrid AI agents. This is a category still being defined — standards, architecture patterns, and competitive positioning are all forming in real time, with competitors ranging from established network security vendors to a wave of new agent-security startups.
We are hiring an experienced Product Manager / Product Owner to take end-to-end ownership of a significant, technically complex area within MARS for Agents. The specific scope will be defined in partnership with the hiring manager based on team needs and the background of the person in this role, and will span identity and security concepts, relevant technical protocols, and platform integration and partnership work. The role operates with a high degree of autonomy day to day, working from strategic direction set by the Head of Product, in an environment that runs agile development at high velocity while actively building the process and rigor needed to scale a growing product line.
This is also a team that works the way it builds: AI assistants and LLM-based tools are part of the daily toolkit here — used to synthesize customer and competitive signal, pressure-test requirements, and prototype against MCP clients and agent runtimes before a single line of production code is written. The person in this role will be defining security for a category they are already a fluent, curious user of.
Outcomes & KPIs
Key Outcome(s) Owned:
End-to-end ownership of an assigned surface area of MARS for Agents — across capabilities such as the agent registry, Claude integration, Microsoft Copilot integration, MCP Server, MCP Proxy, and LLM proxy — from researched opportunity, to written requirement, to shipped and supported capability.
A current, honest, decision-changing competitive point of view for the agent-security category that the wider go-to-market organization can rely on.
Success Metrics / KPIs
Roadmap delivery: committed roadmap items for the owned surfaces shipped within the target release window.
Requirements quality: Reduction in mid-sprint requirement clarifications and rework attributable to ambiguous PRDs or acceptance criteria, measured via engineering feedback each quarter.
Enablement coverage: 100% of shipped capabilities in the owned area have current capability documentation and a delivered briefing to support and solutions engineering at or before release.
Adoption of shipped capability: Customer adoption or usage of newly released capabilities against a target set at launch, tracked for 90 days post-release.
Competitive influence: At least one documented roadmap or positioning decision per quarter, traceable to a published competitive finding.
What You'll Do
Own inbound product direction for your area. Research emerging agentic AI capabilities, attacker techniques, and adjacent standards (MCP, A2A, OWASP agentic-security guidance, agent identity frameworks) to determine what MARS for Agents should build next across the agent registry, Claude integration, Microsoft Copilot integration, MCP Server, MCP Proxy, and LLM proxy.
Turn signal into engineering-ready requirements. Translate market, customer, and competitive input into clear PRDs, user stories, and acceptance criteria — using LLM-based tools to synthesize call notes, support tickets, standards documents, and usage data into prioritization insight, while retaining full accountability for the judgment calls and the accuracy of what you write.
Own and groom the backlog. Make day-to-day prioritization calls across your surfaces within the strategic guardrails set by the Head of Product, and partner directly with engineering through the full build cycle: refinement, in-sprint questions, review, and release.
Validate before you specify. Use AI coding assistants, MCP clients, and agent runtimes hands-on to prototype and stress-test proposed behavior — so requirements are grounded in how agents actually behave, not just how they are documented to behave. Define success metrics for what you ship and track them post-release.
Enable the field. Brief technical support and solutions engineering on new and existing capabilities, and maintain current capability documentation for your area that clearly separates documented and shipping facts from planned work and open questions, so the field never over-promises. Be the trusted authority on what your part of MARS does today, what is coming, and what it deliberately does not do yet.
Engage customers, sales, and marketing. Join customer and prospect conversations periodically to gather requirements, pressure-test positioning, and support technical evaluations; support the sales team with technical Q&A, competitive objection-handling, and input on proposals and decks; and work with product marketing on messaging, positioning, and launch content.
Run competitive analysis that changes decisions. Continuously track competitors relevant to MARS for Agents — network/SSE-SASE incumbents (Palo Alto Networks, Zscaler, Cloudflare, Netskope), agent-identity and IAM players (Okta, CyberArk), MCP gateway vendors, and emerging agent-security pure-plays — and maintain a clear point of view on where MARS leads, where it currently trails, and what capabilities are commoditizing. Feed those findings directly into requirements, positioning, and roadmap prioritization.
Functional Competencies
Required:
6–10+ years of product management or product owner experience, ideally in B2B SaaS, enterprise infrastructure, or security software, including a track record of owning a complex, technical product area end to end.
Demonstrated ability to write clear, engineering-ready requirements (PRDs, user stories, acceptance criteria) and to own a backlog end to end for a technically complex product surface.
Comfort operating with a high degree of autonomy. This role receives strategic direction rather than daily instruction, and the person in it should be able to take a goal and drive it through research, requirements, engineering partnership, and launch across multiple related surfaces at once — with the support of a collaborative product and engineering team.
Comfort operating at high velocity. Our engineering organization runs agile at a fast cadence, and this role also helps bring the process and rigor needed to make the product scalable, so both muscles matter.
Solid working knowledge of AI agent technology: how LLMs and AI agents operate, the difference between autonomous and human-in-the-loop (hybrid) agents, tool and function calling, and — specifically — the MCP (Model Context Protocol) ecosystem (servers, clients, tool calls) at a depth sufficient to write requirements for an MCP Server and an MCP Proxy, not just discuss them conceptually.
Real cybersecurity background, with working familiarity in areas such as identity and access management, proxy and gateway architectures (forward proxy, reverse proxy, secure web gateway / SSE / SASE), and content or traffic inspection. Deep specialization in every area is not required, but enough fluency to engage credibly with engineering and with technical customers is.
Hands-on, regular personal use of AI tools — for example Claude, ChatGPT, Claude Code / Cowork, GitHub Copilot, or similar — including some exposure to how they use MCP or other tool-calling integrations.
Strong written communication, since the role produces a steady stream of specs, FAQs, and internal enablement material.
Preferred / Nice to Have:
Working knowledge of the Microsoft 365 Copilot ecosystem: M365 Copilot, Copilot Studio agents, and Microsoft's Entra/Azure agent identity plane — enough to scope and write requirements for a two-way integration in which MARS augments Microsoft's own agent governance rather than competing with it.
Prior product ownership of an identity or registry system, a proxy or gateway product, or an API/integration platform.
Direct experience with MCP, LLM/agent tool-calling architectures, or building integrations with Claude or other frontier model providers.
Familiarity with OWASP frameworks, including emerging OWASP guidance for agentic AI security.
Experience directly supporting a technical sales motion — SE enablement, competitive battlecards, customer discovery calls.
Experience at a company scaling a new product line or product category from early traction.
Experience using AI-assisted research or analysis tooling as part of a regular product workflow — for example synthesizing customer feedback at volume, or building lightweight prototypes to validate requirements.
Bachelor's degree in Computer Science, Engineering, or a related technical field, or equivalent practical experience.
Menlo Mindsets
The Menlo Mindsets serve as our strategic operating system, directly linking our daily behaviors to the business results we need to achieve by defining exactly "how" we do our work. By establishing this clear, shared standard, they empower our most successful employees to consistently drive the innovation and accountability required for our long-term success.
Proactive Leadership — I do not settle for the status quo. I take ownership, make informed decisions, and proactively communicate to drive results while empowering others to do the same.
What it looks like in this role: You receive strategic direction, not a task list — and you are expected to decide what your surfaces should build next, act on it, and keep the Head of Product and your partners informed as you go.
Straight Talk — I share honestly and transparently, actively seeking diverse perspectives while encouraging the same.
What it looks like in this role: You publish an honest competitive point of view, including where MARS currently trails, and you keep documentation that clearly separates what ships today from what is planned so the field never over-promises.
United Impact — I break down barriers to champion cross-functional collaboration, uniting diverse strengths with clear ownership to drive exceptional, aligned outcomes.
Elevated Talent — I believe talent is our differentiator, upholding a high bar for performance and leadership and continuous development.
Customer-Compelled — Customer focus is my mission. I own their experience, prevent their challenges, and act with urgency to deliver value.
What it looks like in this role: You sit in customer and prospect conversations regularly, support live technical evaluations, and carry what you hear straight back into requirements rather than filing it away as research.
About Menlo Security
Menlo Security's mission: Enabling humans and agents to connect, communicate, and collaborate securely without compromise. Menlo Security's patented Isolation platform protects organizations from cyberattacks by eliminating the threat of malware from the web, documents, and email. Menlo Security is trusted by major global businesses, including Fortune 500 companies, to protect their most important asset — their data — and is backed by top-tier investors.
Our Compensation and Benefits
At Menlo Security, Base Salary is one part of our competitive total compensation and benefits package and is determined using a salary range. The base salary range for this role is [Pay Range].
In accordance with NY, CO, CA, and WA law, the range provided is Menlo Security’s reasonable estimate of the base compensation for this role. The actual amount may be higher or lower, based on non-discriminatory factors such as experience, knowledge, skills, abilities, and location. All employees may be eligible to become Menlo Security shareholders through eligibility for stock-based compensation grants, which are awarded to employees based on company and individual performance.
Menlo Security does not accept unsolicited resumes from search firm recruiters. Fees will not be paid in the event a candidate submitted by a recruiter without an agreement in place is hired; such resumes will be deemed the sole property of Menlo Security.
Menlo Security is an equal opportunity employer. All aspects of employment will be based on merit, competence, performance, and business needs. We do not discriminate on the basis of race, color, religion, marital status, age, national origin, ancestry, physical or mental disability, medical condition, pregnancy, genetic information, gender, sexual orientation, gender identity or expression, veteran status, or any other status protected under federal, state, or local law.
MSGL-I4
Follow us on LinkedIn!
Why Menlo?
At Menlo, we don't settle for the status quo — in our technology or our culture. How we think and act is just as important as what we build. Our culture is defined by five core mindsets: Proactive Leadership, Straight Talk, United Impact, Elevated Talent, and Customer-Compelled. We take ownership and drive outcomes without waiting to be told. We communicate directly and seek hard truths. We break down silos and win together. We hold a high bar for ourselves and the people around us. And we treat every customer interaction as mission-critical. If you're someone who sees it, owns it, solves it, and does it — you'll thrive here.
All qualified applicants will receive consideration for employment without regard to race, sex, color, religion, sexual orientation, gender identity, national origin, protected veteran status, or on the basis of disability.
TO ALL AGENCIES: Please, no phone calls or emails to any employee of Menlo Security outside of the Talent organization. Menlo Security’s policy is to only accept resumes from agencies via Ashby (ATS). Agencies must have a valid services agreement executed and must have been assigned by the Talent team to a specific requisition. Any resume submitted outside of this process will be deemed the sole property of Menlo Security. In the event a candidate submitted outside of this policy is hired, no fee or payment will be paid.
