Obsidian Security

Obsidian Security is the leading SaaS security platform, trusted by global enterprises like Snowflake, T-Mobile, and Algolia. We protect 200+ organizations across North America, Europe, the Middle East, Southeast Asia, Australia, and New Zealand, including many of the world’s largest Fortune 1000 and Global 2000 companies. Founded in 2017 and backed by top investors like Greylock, Obsidian was built to close a critical gap: securing SaaS apps where business happens—Microsoft 365, Salesforce, and hundreds more. The company does this by offering a complete SaaS security platform to reduce risk, detect and respond to threats, and prevent breaches at the source. Obsidian was built by leaders who redefined endpoint and identity security at CrowdStrike, Okta, Cylance, and Carbon Black. Now, they’re transforming how SaaS is secured. With AI driving rapid SaaS growth and complexity, agentic AI tools gain privileged access to sensitive data through integrations, creating new risks most security tools miss. Obsidian uniquely detects anomalous OAuth token activity and manages integration risks. Major announcements are on the horizon. Recognizing that SaaS security needs to evolve, Obsidian enables growing organizations to start with a lightweight, prevention-focused browser extension and expand coverage over time. With global momentum, a growing partner ecosystem including SentinelOne, Databricks, and Google Cloud, and a major fundraise ahead, Obsidian is scaling rapidly toward long-term growth and IPO readiness. About the Role This is a security-depth role on our Manchester engineering team. We collect rich telemetry from hundreds of SaaS and AI platforms — and we're looking for someone who can look at that data and ask questions no one has asked before. Your core contribution is security insight: understanding how SaaS and AI platforms are built, how they're abused, and how the signals we collect can be used in novel ways to solve real customer security problems. You'll work alongside a team of data engineers, advising on what's worth detecting and building prototype approaches to prove it out. You need to be a competent engineer — comfortable writing SQL, Python, and working with large datasets — not at the level of a dedicated data engineer, but independently capable. Your edge is security knowledge and creative thinking; the data skills are the table stakes that let you exercise it. What you'll do Develop deep expertise in how major SaaS and AI platforms are structured, how they handle identity and access, and where security risk concentrates — then translate that into detection and posture logic for our product. Look across the telemetry we collect and identify novel ways to use it: new signals, new correlations, new approaches to catching misconfigurations or risky behaviour that existing tools miss. Advise the engineering team on what security controls matter and why — acting as the security compass that helps the team prioritise what to build. Prototype new detection approaches in SQL and Python to validate ideas before they're productised. Stay close to the attacker perspective — tracking how threats against SaaS and AI platforms evolve and ensuring our coverage stays ahead of them. Debug security-related issues in customer environments, bringing both data fluency and security judgment to ambiguous problems. What we're looking for Requirements: 4+ years in cybersecurity, with a focus on SaaS platforms, cloud security, identity systems, or application security. A track record of original thinking — you've found things other people missed, whether in research, red teaming, bug bounty, or product security work. Strong understanding of how SaaS platforms (Google Workspace, Microsoft 365, Salesforce, Okta, or similar) work under the hood: API structures, permission models, authentication flows. Solid SQL and Python skills — you won't be the one building the pipelines, but you need to be able to query large datasets, write detection logic, and prototype ideas end-to-end without leaning on the data engineers to do it for you. Ability to communicate complex security concepts clearly to an engineering audience. Nice to Have Experience with AI/LLM platforms (ChatGPT Enterprise, Copilot, Gemini, Claude, etc.) from a security perspective. Familiarity with dbt, Clickhouse, or Databricks. Experience working in a product security or security research function at a security vendor. Published research, CVEs, conference talks, or bug bounty work demonstrating independent security thinking. Why Join Us Work on one of the most forward-looking problems in enterprise security — SaaS and AI platform risk is largely unsolved and growing fast. Have a direct influence on what Obsidian detects and how — your security insight shapes the product roadmap. Learn from and contribute to a team that includes some of the people who defined endpoint and identity security. Ideas move fast here — you'll go from concept to customer impact in weeks, not quarters. Work for a Silicon Valley-headquartered company without leaving Manchester — your security insights will ship into a product protecting some of the world's largest organisations. Employee Benefits Our competitive benefits packages are designed to support our employees' well-being, both at work and at home. Our US based employees enjoy: Competitive compensation with equity and 401k Comprehensive healthcare with dental and vision coverage Flexible paid time off and paid holiday time off 12 weeks of new parent or family leave Personal and professional development resources For more details on our US benefits, or for information on our international benefits, please see here. Pay Transparancy Please note that the base pay range is a guideline and for candidates who receive an offer, the base pay will vary based on factors such as work location, as well as the knowledge, skills and experience of the candidate. In addition to a competitive base salary, this position is eligible for equity awards and may be eligible for sales commission or incentive compensation based on the role or function within the company. At Obsidian, we are proud to be an equal-opportunity employer. We value diversity and hire for talent, passion, and compassion. In compliance with federal law, all persons hired will be required to submit satisfactory proof of identity and legal authorization. If you have a need that requires accommodation, please contact [email protected] Information collected and processed as part of any job applications you choose to submit is subject to Obsidian’s Applicant Privacy Policy. Base Salary Range £91,000—£106,000 GBP

Founded in 2017, Obsidian Security was created to close a critical gap: securing the SaaS applications where modern business happens—platforms like Microsoft 365, Salesforce, and hundreds more. Backed by top investors including Greylock, Norwest Venture Partners, and IVP, we’ve built a complete SaaS security platform to reduce risk, detect and respond to threats, and prevent breaches at the source. Our team includes leaders who helped define the categories of endpoint and identity security at CrowdStrike, Okta, Cylance, and Carbon Black. Now, we’re transforming how SaaS is secured—in the era of agentic AI. Today, Obsidian is trusted by global enterprises like Snowflake, T-Mobile, and Pure Storage. We protect more than 200 organizations across North America, Europe, the Middle East, Southeast Asia, Australia, and New Zealand—including many of the world’s largest Fortune 1000 and Global 2000 companies. With strong global momentum, a growing partner ecosystem including SentinelOne, Databricks, and Google Cloud, and a major fundraise on the horizon, we’re scaling quickly toward long-term growth and IPO readiness. Join us as we define the future of SaaS security! Obsidian Security is looking for a Staff Product Manager, AI Governance & Supply Chain Integration Risk to lead product strategy and execution for how customers understand, prioritize, and reduce risk across their SaaS and third-party ecosystem. We’re looking for a PM who thinks beyond product features and focuses on the key outcomes customers care about most: reducing unknown third-party risk, understanding where AI and agentic capabilities are enabled, prioritizing what matters, making risk explainable, and helping teams take action. As SaaS vendors rapidly add AI and agentic capabilities into their applications, enterprises are struggling to answer basic but critical questions: Is AI enabled in our tenants? What does it do? What data can it access? Who can use it? Which agents, apps, or integrations can act on behalf of users? Is any of this governed consistently? This role is not about managing a feature backlog. It is about identifying the most important customer and business problems, defining the outcomes we need to drive, and partnering with Engineering, Design, Product Marketing, Sales, Solutions Engineering, Customer Success, and leadership to deliver measurable customer value. This role is based in the United Kingdom. Responsibilities Own the product strategy and roadmap for Supply Chain Risk & AI Governance, with a clear focus on customer outcomes and business impact. Identify the most important customer problems related to SaaS supply chain risk, third-party access, AI enablement, agentic capabilities, data exposure, and governance gaps. Define success in terms of outcomes such as risk reduction, prioritization quality, adoption, remediation progress, customer value, and revenue impact. Translate customer problems and desired outcomes into clear product requirements, roadmap priorities, and success metrics. Partner deeply with Engineering on solution direction, technical tradeoffs, sequencing, data models, integrations, risk scoring, and workflows. Work with Design to create experiences that make complex SaaS, identity, AI, agent, data access, and third-party risk relationships understandable and actionable. Partner with Product Marketing, Sales, Solutions Engineering, Customer Success, and Support on positioning, launch readiness, field enablement, adoption, and feedback loops. Stay close to customer and market signals around SaaS AI adoption, AI governance, agentic workflows, third-party risk, identity risk, and data exposure. Drive cross-functional alignment, make tradeoffs visible, and push decisions forward in ambiguous situations. Own outcomes beyond launch by measuring whether the work is landing, learning from customer feedback, and adjusting based on results. Required qualifications 7+ years of Product Management experience, ideally in B2B SaaS, cybersecurity, risk, compliance, data, platform, or enterprise software. Strong track record of thinking beyond features to define customer problems, desired outcomes, success metrics, and product strategies that drive measurable impact. Experience owning a product area from strategy through execution, launch, adoption, and iteration. Strong technical fluency, including comfort working with Engineering on APIs, data models, integrations, identity/access systems, event data, permissions, and enterprise architecture. Strong customer and business judgment, with the ability to prioritize high-impact work and make clear tradeoffs. Ability to understand emerging customer problems in AI governance, SaaS risk, data access, and agentic workflows. Proven ability to lead cross-functional teams without formal authority. Excellent written and verbal communication skills. Based in the United Kingdom, with ability to collaborate across UK, European, and US time zones.