Geared toward candidates with offensive cyber operations experience comfortable with high-stakes product development. The role emphasizes autonomy, legal frameworks, and national security domain expertise, and is based in Arlington, VA, requiring U.S. citizenship.
Derived from job-description analysis by Serendipath's career intelligence engine.
Original posting from Twenty via Ashby
ABOUT THE COMPANY
America is under sustained cyber attack. Our adversaries infiltrate our networks, steal our IP, and degrade the digital infrastructure that modern life runs on. They’ve learned—correctly—that those attacks rarely produce consequences.
Twenty was founded to change that, by making our adversaries think twice before they attack us. Our vision is American and allied primacy in cyberspace—a future where they cannot contest us, deterrence is assured, and the free world remains secure.
Founded in 2024, Twenty Technologies (www.twenty.io http://www.twenty.io) industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from Khosla Ventures, Accel, Caffeinated Capital, Friends & Family Capital, Point72 Ventures, General Catalyst, and In-Q-Tel.
Mission | On Site | Full Time | U.S. Citizenship Required / No Active Clearance Required
ROLE SUMMARY
Twenty builds AI-enabled technology for mission-critical cyber operations. We're seeking a Senior Product Manager to shape capabilities for cyber warfare, focused on building highly autonomous capabilities employed on the nations most critical operations. You'll work closely with practitioners and engineers to understand how users execute high-stakes offensive cyber operations in support of national security objectives, then turn those needs into reliable, intuitive product experiences. You'll balance speed, accuracy, auditability, and legal frameworks while guiding product work from discovery through delivery and iteration.
WHO YOU ARE
- You're fluent in some aspect of cyber related workflows, and can earn trust with security researchers, engineers, and mission-facing users.
- You can translate complex technical problems into clear product choices and useful, intuitive experiences.
- You're comfortable with ambiguity, high accountability, and hands-on collaboration.
- You communicate clearly and bring sound product judgment to complex technical and security tradeoffs.
WHAT YOU’LL DO
- Own discovery, roadmap, prioritization, requirements, delivery, and iteration for offensive-security and vulnerability-management capabilities.
- Learn how practitioners conduct nation state level cyber operations; turn those workflows into clear, actionable product experiences.
- Partner with engineers and mission-facing users to define useful findings, workflow integrations, data needs, and reliable technical behavior.
- Make product tradeoffs across speed, usability, accuracy, auditability, and legal frameworks.
- Set meaningful success metrics, gather user feedback, and use what you learn to improve the product.
- Communicate product strategy, roadmap choices, and technical tradeoffs clearly to leadership and delivery teams.
MUST HAVE
- Substantive experience in at least one of: offensive cyber operations (OCO), vulnerability research, attack surface management, vulnerability management, incident response, adversary hunt, cyber threat intelligence, penetration testing, or red teaming.
- Strong product judgment and the ability to turn technical needs into user-centered product direction. Formal PM experience is helpful; demonstrable ownership and shipped outcomes matter most.
- Ability to work credibly with engineers and practitioners on integrations, data quality, workflows, and security tradeoffs.
- Comfort with ambiguity, high accountability, and hands-on collaboration.
NICE TO HAVE
- Experience with offensive-security or vulnerability-focused platforms built for expert users.
- Exposure to vulnerability intelligence, adversary emulation, security research, or technical mission workflows.
- Experience with 0-to-1 product development, data-rich security tools, or AI-assisted security workflows.
Benefits
What's on the table:
- Health. Medical, dental, and vision plan options. Life / AD&D, disability coverage options.
- Family. Paid parental leave for eligible full-time employees. 12 weeks for birthing parents, 4 for non-birthing parents, 6 weeks for adoptive, foster, or intended parents through surrogacy.
- Vacation. Paid holidays and flexible PTO. Take what you need.
- Retirement. 401(k) with pre-tax and Roth options. HSA/FSA options, dependent care FSA.
Benefits vary by location, role, and eligibility. Full plan details provided during the interview and offer process.
If this role sounds like you, apply and share with us your interest
Due to U.S. government contract and security requirements, this role is limited to U.S. citizens. Some positions may also require eligibility to obtain and maintain a U.S. Government security clearance. Any active clearance requirement will be listed in the role description.
Twenty is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability, or any other protected status, consistent with applicable law.
If you need a reasonable accommodation during the hiring process, let us know and we will work with you.
Source: Twenty careers (Ashby)