Senior Vellox Product Manager, Cyber Environment Detections

The Opportunity:

TheProduct team is defining a newproduct-led growthbusinesswithin Booz Allen where you will have theopportunity to design, build, and deliverproductsto mission and commercial customersatscale. You willexperience theenergyof a start-up,with the resources, mentorship, and stability of an established tech company-beingable to look acrossindustry&capability areas to craftnewoutcomesleveragingthedeep catalog of existing technologyand customersolutions.This team is looking to consistently push the boundaries of what is possible, shapinga futurewhereproductinvestments combined with Booz Allenexisting services businesses can supercharge customers.

If you are wanting to build and deliveraproduct which can outsmart human adversaries while managing massive scales of data - the intersection of where software engineeringis meeting digital forensics;Booz Allen is seeking a Product Manager todefine and buildthisnext generation products. As a Product Manager focused onthe next generation ofdetectionand remediationengineering, you will need to blendyour knowledge of howthreatsmanifestthemselveswithyourpassionforeliminatingtheSIEM & SOAR“noise”and alert fatigueburying analyststoday. This role will be able toleveragethe decades of experience which Booz Allen has in delivering differentiatedand successfuldeep securityoutcomes for customers, but tocontribute toshapingits future.

One challenge will be tofuse deepdomain knowledge around threat modeling & adversarial techniquesto develop automated and agentic patterns whichunfoldthe “story” of an attack or vulnerability and then craft a detection rule to prevent it in the future.This PM willwork acrossthe end-to-end product lifecycle, from identifying high-impact AI use cases, such as likenew patterns to detectliving-of-the-land (LOTL)attacks,and defining the technical roadmap, to collaborating with engineering and data science teams to build trustworthy, auditable features, and finally, partnering with go-to-market teams to ensure the product successfully meets the complex security and audit requirements ofour mostregulated customers.These capabilities will underpin solutions and products across our product portfolio, including Cybersecurity, Defense, Autonomy, AI, Data, and more.

Why environment knowledge matters:To deliver trustworthy detections and reduce false positives at scale, this role will build capabilities thatmake customer environmentsfirst-classinputsto Ranger systematically capturing asset inventories, topology, control stacks, and telemetry sources. By codifying these signals intoenvironment models and baselines,we’lltune rule generation to each client’s reality, including cloud,on-prem, and hybrid, improve analyst outcomes, and acceleratetime-to-valueacross regulated and mission contexts.

WhatYou'll Do:

• Own the end-to-end vision, strategy, and roadmap for an AI-driven detection engineering platform that surpasses human-centric models.

• Create a repeatable discovery process to model environments, including assets, topology, identity, and logs, and generate context-aware, ranked detection rules with KPIs like readiness time, FP reduction, and coverage uplift.

• Apply deep knowledge of frameworks like MITRE ATT&CK to design detections aligned to real adversary behaviors across movement, exfiltration, and persistence.

• Identify high-value opportunities for AI automation, enabling autonomous detection creation, triage, and response actions that help users resolve threats, not just notice them.

• Design analyst-focused interfaces that elevate critical threats while suppressing non-actionable SIEM/SOAR-style noise.

• Build DaC workflows using Git-based version control, CI/CD testing, and automated deployment across massive, normalized event pipelines.

• Integrate strategic data sources, including endpoint trees and behavioral telemetry, to enrich environment models and scale tuning from small regions to global deployments.

• Conduct ongoing competitive and market research to identify gaps, auditor expectations, and defensible product advantages in the evolving detection landscape.

• Translate complex threat-behavior stories into prioritized product requirements, user stories, and acceptance criteria that drive engineering and design execution.

• Partner across engineering, AI/DS, UX, legal and compliance, and GTM teams to align technical architecture, data governance, ingestion, labeling, and model-training strategy with customer needs.

You Have:

• 5+ years of experience in technology product management

• Experience analyzing and solving problems

• Ability to manage the entire product lifecycle, from ideation to launch and beyond

• Ability to thrive in fast-moving startup environments and effectively leadchange

• Ability to travel up to 20% of the time

• Bachelor's degree inComputer Science,Engineering,InformationSystems,DataScience,AppliedMathematics, or Business

Nice If You Have:

• Experience with SaaS platforms and products involvingmulti-tenancy,subscriptions, billing, and compliance requirements

• Experiencewithdetection engineering, including authoring and tuning detections across SIEM and EDR platforms, and detection-as-code or CI/CD workflows

• Experience modeling customer environments, including cloud,on-prem, and hybrid, including asset discovery,control-stackmapping, including EDR, SIEM, or IDP, and telemetry onboarding for detection use cases

• Experiencewiththreat hunting using telemetry, analytics, and threat intelligence toidentifyadversary activity

• Experience with incident response, including alert triage, investigation, containment, and remediation

• Experience with leading a product team toward a shared goal, inspire confidence, and drive consensus across the organization.

• Experience with and capacity to break down complex, ambiguous problems into smaller, manageable pieces and develop innovative solutions.

• Experience with design tools, such as Figma, that enhance the product conceptualization process.

• Knowledge of the MITRE ATT&CK framework for detection mapping and adversary analysis

• Knowledge of cybersecurity operations, detection, cyberthreat intelligence, AI, distributed systems, and cloud-based infrastructure

Compensation

At Booz Allen, we celebrate your contributions, provide you with opportunities and choices, and support your total well-being. Our offerings include health, life, disability, financial, and retirement benefits, as well as paid leave, professional development, tuition assistance, work-life programs, and dependent care. Our recognition awards program acknowledges employees for exceptional performance and superior demonstration of our values. Full-time and part-time employees working at least 20 hours a week on a regular basis are eligible to participate in Booz Allen’s benefit programs. Individuals that do not meet the threshold are only eligible for select offerings, not inclusive of health benefits. We encourage you to learn more about our total benefits by visiting the Resource page on our Careers site and reviewing Our Employee Benefits page.

Identity Statement

As part of the hiring process, we will ask you to complete an identity verification process that leverages advanced biometrics and artificial intelligence to ensure authenticity and protect against identity fraud. You are expected to be on camera during interviews and assessments. We reserve the right to take your picture to verify your identity and prevent fraud.

Candidate AI Usage Policy

AI is a part of our daily work at Booz Allen, and we are committed to the responsible and ethical use of AI tools. However, we want to ensure a fair candidate process based on your own skills and knowledge. As part of this commitment, the use of artificial intelligence (AI) or other tools to assist with responses during interviews (whether in-person or virtual) is prohibited unless permission is explicitly provided.

Work Model

Our people-first culture prioritizes the benefits of collaboration, whether it occurs in person or virtually. To support engagement and effective communication, employees working virtually are generally expected to have their cameras on during meetings.

• Remote: If this position is listed as remote, there may still be occasions when you are required to work in person at a Booz Allen or customer facility.

• Hybrid: If this position is listed as hybrid, you will be expected to work from a Booz Allen facility frequently, in alignment with leadership expectations and the needs of the role. You may also be required to work from or visit a customer facility.

• Onsite: If this position is listed as onsite, work will primarily be performed at a Booz Allen office or customer facility, where employees will collaborate directly with colleagues and customers as required by the role.

Commitment to Non-Discrimination

All qualified applicants will receive consideration for employment without regard to disability, status as a protected veteran or any other status protected by applicable federal, state, local, or international law.