Skip to content

Open nowFirst seen 11 hours ago

Product Manager (AppSec / SSCS) — Hybrid Braga (2 days/week)

HumanIT Digital Consulting107 open roles

Where
Braga, Portugal
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowProduct Manager (AppSec / SSCS) — Hybrid Braga (2 days/week)HumanIT Digital Consulting · Braga, Portugal
  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on HumanIT Digital Consulting's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

11.4% of postings close within 7 days. Measured by our own scanner across the market.

Share of postings closed within
  1. 2.0%1 day
  2. 4.2%3 days
  3. 11.4%7 days
  4. 17.5%14 days
  5. 34.2%30 days
  6. 43.5%60 days
This job: first seen 11 hours ago

The posting

Product Manager (AppSec / SSCS) — Hybrid Braga (2 days/week)

Hybrid | Braga, Portugal | 2 days/week in office | English Required

ABOUT THE OPPORTUNITY

You are joining a globally recognized leader in enterprise application security — a company that sets the standard for cloud-native AppSec platforms trusted by Fortune 500 organizations worldwide. This is not a maintenance role. You are stepping into one of the most strategically important product areas in cybersecurity today: Software Supply Chain Security (SSCS) in the age of AI-driven development.

This is a hybrid role based in Braga, Portugal (2 days/week in office), offering the flexibility of remote work combined with direct team collaboration. You will own meaningful product areas across both 01 builds and mature capabilities, collaborating directly with R&D, UX, security researchers, and enterprise customers to shape the future of how organizations defend their software supply chains.

PROJECT & CONTEXT

The modern software supply chain is under pressure like never before. AI-assisted development, agentic workflows, and emerging open-source ecosystems have dramatically expanded the attack surface. This role sits at the center of that challenge, owning roadmap areas that directly address these new and evolving threat vectors.

You will work across a portfolio of products including established SSCS capabilities and net-new categories still being defined — from dependency risk and integrity verification to AI toolchain exposure and developer-facing security integrations. The competitive landscape moves fast, and you will be expected to move with it: monitoring shifts, synthesizing customer signals, and driving product decisions with both strategic clarity and execution rigor.

You will collaborate across a high-performing PM team where shared ownership is the norm, with cross-functional partners in UX, R&D, security research, sales, field, marketing, and enablement. Customer proximity is a core part of the job — you will run design partner programs, validate with enterprise customers directly, and be a key voice in go-to-market planning.

WHAT WE'RE LOOKING FOR (Required)

  • 5+ years of product management experience in technical security or developer tooling domains, with a proven track record of shipping impactful products
  • Hands-on experience defining and owning product roadmaps in emerging or ambiguous product spaces — comfortable operating where the category itself is still being shaped
  • Strong cross-functional collaboration skills: able to partner as a peer across PM teams, drive shared goals, and align R&D, UX, and business stakeholders
  • Proven ability to translate complex technical challenges into clear product requirements for engineering teams and intuitive user experiences for developers
  • Direct experience running structured customer validation and early access programs, including engagement with enterprise design partners
  • Excellent communication and presentation skills — able to present roadmaps, validate requirements, and manage relationships with enterprise stakeholders and customers
  • Analytical, data-driven decision-making: ability to define and monitor KPIs including adoption rates, detection accuracy, false positive rates, and scanning performance
  • Business language: English (written and spoken, professional level required)

NICE TO HAVE (Preferred)

  • Familiarity with modern AI-assisted development environments and agentic coding workflows (e.g., GitHub Copilot, Cursor, or similar tools)
  • Experience with application security platforms: SAST, SCA, DAST, or equivalent tooling
  • Prior experience as a software developer or in a software engineering role — gives you a native understanding of the developer experience
  • Knowledge of Software Supply Chain Security concepts: SBOM, dependency confusion, typosquatting, package integrity, or related attack vectors
  • Familiarity with CI/CD pipelines and DevSecOps toolchains
  • Experience working in a globally distributed, hybrid product organization

Compensation: €2,000 – €2550/month net, depending on experience and seniority level.

Why HumanIT people stay (4.4 Glassdoor, 89% recommend)

- 15th month salary- Health insurance covering your family- Birthday off- Mobility program for digital nomads- Real work-life balance

Full benefits https://www.humanit.pt/careers/#perksWhat it's really like https://www.humanit.pt/careers/#work-at

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against HumanIT Digital Consulting's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.
  3. We apply on HumanIT Digital Consulting's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.
  4. Every reply, sorted

    HumanIT Digital Consulting's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.
  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

By hand5–10
With CV Rocket100
applications a day

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.