Product Manager

Sonatype

Flexible / RemotePosted 2 months agoDiscoveredMatch locked

RemoteProduct Management

About the role

Sonatype is the software supply chain security company. We provide the world's best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise grade SBOM management and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale. As founders of Nexus Repository and stewards of Maven Central, the world's largest repository of Java open-source software, we are software pioneers and our open source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development. More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains. Our groundbreaking, full-spectrum platform empowers customers to rapidly create, deploy, and maintain innovative software at scale, all while aligning directly to their business needs. Trusted by more than 2,000 organizations - including 70% of the Fortune 100 - and over 15 million software developers, Sonatype's tools and guidance help deliver exceptional, secure software. From inventing modern artifact management with Nexus Repository to introducing the world's only solution that halts malicious open-source malware in its tracks, we're committed to constant innovation. We leverage AI/ML to give our clients, developers, and the industry complete confidence in the quality, automation, and security of their software. Learn more at www.sonatype.com .

Position Overview

As a

Product Manager

, you will focus on the

core Nexus Repository product

. You will support the Product Management team by building product objectives and roadmaps while leading execution teams to bring compelling, viable solutions to fruition. You will work in close alignment with engineering squads, product design, product marketing, sales engineering, and customer success to drive impactful features for developers globally.

What You will do

•

Drive Core Execution

Own the roadmap and feature execution for the core Nexus Repository, identifying and eliminating bottlenecks to ensure timely delivery. •

Define & Measure Success

Establish mechanisms to accurately measure and inform your product's in-market performance, adoption, and future functionality. •

Cross-Functional Leadership

Collaborate across Engineering, Design, Product Marketing, Support, and Sales Engineering to build, market, and support scalable solutions. •

Cross-Team Collaboration

Partner with peer Product Managers for Platform, security, and AI governance features to ensure a cohesive end-to-end platform experience. •

Process Optimization

Continuously develop personal expertise in product management practices, exploring new methods for effective prioritization and execution.

What You'll Bring

•

Technical & Software Development Background

• Prior hands-on experience in software development or engineering (even brief/past experience, software projects, or coding background) is strongly preferred.

• A clear, practical understanding of software development at scale, enterprise compliance, artifact repositories, and security controls within the SDLC.

•

Ownership & Drive

A proven track record of taking end-to-end ownership, navigating organizational roadblocks, and making a tangible impact. •

Industry Context

Background and familiarity in Enterprise Software, SaaS, or highly regulated environments (e.g., Banking/Finance) is a strong plus, combined with an agile, flexible growth mindset. •

Stakeholder Management

Experience working directly with Engineering Directors, Product Designers, and engineering teams. •

Communication

Outstanding verbal and written communication skills in English (advanced/fluent proficiency is required). •

Education

A Bachelor's degree in Computer Science, Software Engineering, or a related technical field is highly desirable.

What Makes You A Strong Fit

•

Former software developer who transitioned into Product Management, OR a PM with deep technical fluency who understands developer pain points, repositories, and SDLC security controls.

•

Corporate/Enterprise background (e.g., Banking/SaaS) to understand compliance and scale, but with a flexible, high-agency startup attitude (avoid rigid "corporate" mentalities).

Things that we are proud of

2025 Visionary in Gartner® Magic Quadrant™ for Application Security Testing!

2025 AI Compliance Solution of the Year - AI Breakthrough Awards

2025 DEVIES Award to our SBOM Manager for a new product for its innovation and impact in developer technology

2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)

Constellation AST Shortlist: Sonatype has been listed on the Constellation ShortList™ for Application Security Testing for 2024

Data Breakthrough Awards: Sonatype was announced as a 2024 winner in the "Open Source Data Solution of the Year."

SD Times: Best in Show Security

Fast Company Best Workplaces for Innovators 2024

The Herd Top 100 Private Software Companies 2024.

Diversity & Inclusion Working Groups

Parental Leave Policy

Paid Volunteer Time Off (VTO)

#L1-AL1

At Sonatype, we value diversity and inclusivity. We offer perks such as parental leave, diversity and inclusion working groups, and flexible working practices to allow our employees to show up as their whole selves. We are an equal-opportunity employer, and we do not discriminate on the basis of race, religion, color, national origin, gender, sexual orientation, age, marital status, veteran status, or disability status. If you have a disability or special need that requires accommodation, please do not hesitate to let us know.

Not included in the source posting: qualifications, benefits.

Skills

artificial-intelligenceproduct-managementapplication-securityagilejavamachine-learning

Who can apply

The employer didn't state any visa, work authorization, citizenship or clearance requirements in this posting. Confirm with the employer before applying.

Read automatically from the employer's posting text. Always confirm with the employer — requirements can change after a job is published.