Sonatype is the software supply chain security company. We provide the world’s best end-to-end software supply chain security solution, combining the only proactive protection against malicious open source, the only enterprise-grade SBOM management, and the leading open source dependency management platform. This empowers enterprises to create and maintain secure, quality, and innovative software at scale.
As founders of Nexus Repository and stewards of Maven Central, the world’s largest repository of Java open-source software, we are software pioneers, and our open-source expertise is unmatched. We empower innovation with an unparalleled commitment to build faster, safer software and harness AI and data intelligence to mitigate risk, maximize efficiencies, and drive powerful software development.
More than 2,000 organizations, including 70% of the Fortune 100 and 15 million software developers, rely on Sonatype to optimize their software supply chains.
Our groundbreaking, full-spectrum platform empowers customers to rapidly create, deploy, and maintain innovative software at scale, all while aligning directly to their business needs. Trusted by more than 2,000 organizations—including 70% of the Fortune 100—and over 15 million software developers, Sonatype’s tools and guidance help deliver exceptional, secure software.
From inventing modern artifact management with Nexus Repository to introducing the world’s only solution that halts malicious open-source malware in its tracks, we’re committed to constant innovation. We leverage AI/ML to give our clients, developers, and the industry complete confidence in the quality, automation, and security of their software. Learn more at www.sonatype.com
At Sonatype, we empower developers and enterprises to innovate securely with open source. Our products sit at the heart of modern software supply chains — protecting millions of developers and organizations from risk while accelerating the pace of innovation. As a Product Manager, you’ll play a critical role in advancing the state of the art in open source security, helping teams build trust in every component they use.
What you will do
As a Product Manager, you’ll play a critical role in advancing the state of the art in open source security, helping teams build trust in every component they use.
Key responsibilities:
Product Strategy & Leadership: Own the product roadmap, execute the overall strategy, and manage the business case (including product profitability) for a core part of Sonatype’s security portfolio.
End-to-End Lifecycle Management: Oversee everything from writing high-level requirements and planning launches to managing in-life products, including customer feedback and issue resolution.
Security & Domain Focus: Define and deliver capabilities that help organizations identify and prevent open-source malware and supply chain attacks at scale.
Cross-Functional Collaboration: Partner closely with engineering, data science, design, and marketing to translate vision into impactful outcomes.
Market & Customer Engagement: Collaborate with customers and industry experts to deeply understand developer workflows and the evolving threat landscape.
Data-Driven Decision Making: Leverage data and user feedback to drive product adoption, ensure user satisfaction, and deliver measurable security improvements in security.
What you will bring
Product & Platform Leadership: A proven track record of leading product strategy and delivery for complex SaaS or developer-facing platforms.
Domain Expertise: Experience working within technical domains such as application security, DevSecOps, or developer tooling. Experience working with a software product company is considered a major plus.
Years of Experience: 5+ years of experience in roles with exposure to the product development lifecycle and, ideally, exposure to modern software development techniques.
Education: A bachelor's degree in Computer Science or a related field is noted as helpful.
Core Skills: Strong analytical skills (balancing customer insight, business value, and technical feasibility) along with outstanding verbal and written communication skills.
Why you should apply
Work with Industry Experts: You will collaborate with some of the brightest minds in software supply chain security. As the founders of Nexus Repository and stewards of Maven Central, Sonatype's open-source expertise is unmatched.
Tackle Complex Technical Challenges: If you enjoy solving complex technical problems and want to help build the future of secure software development, this role offers a highly rewarding environment to make a meaningful impact.
Join an Industry Leader: Sonatype is a trusted pioneer in software supply chain security, relied upon by more than 2,000 organizations—including 70% of the Fortune 100—and over 15 million software developers worldwide.
Things That We Are Proud Of
- 2026 Gartner® Magic Quadrant™ Leader for Software Supply Chain Security
- 2026 Celebrating 15 Years of Sonatype Research Labs – Industry-leading software supply chain and open source security research
- 2026 Founding Member of the Linux Foundation Initiative for Open Source Sustainability
- 2026 State of the Software Supply Chain® Report – Continuing industry leadership in software supply chain security and AI security research
- 2025 Visionary in Gartner® Magic Quadrant™ for Application Security Testing!
- 2025 AI Compliance Solution of the Year - AI Breakthrough Awards
- 2025 DEVIES Award to our SBOM Manager for a new product for its innovation and impact in developer technology
- 2024 Industry Leader in Forrester-Wave for Software Composition Analysis (2024 Q4 report)
- Constellation AST Shortlist: Sonatype has been listed on the Constellation ShortList™ for Application Security Testing for 2024
- Data Breakthrough Awards: Sonatype was announced as a 2024 winner in the "Open Source Data Solution of the Year."
- SD Times: Best in Show Security
- Fast Company Best Workplaces for Innovators 2024
- The Herd Top 100 Private Software Companies 2024
- Diversity & Inclusion Working Groups
- Parental Leave Policy
- Paid Volunteer Time Off (VTO)
Skills Required
- 5+ years of experience with product development lifecycle roles
- Proven experience leading product strategy and delivery for complex SaaS or developer-facing platforms
- Experience in application security, DevSecOps, or developer tooling
- Strong analytical skills balancing customer insight, business value, and technical feasibility
- Outstanding verbal and written communication skills
- Experience working at a software product company
- Bachelor’s degree in Computer Science or a related field
What We Do
The Sonatype journey started almost 15 years ago, just as the concept of “open source” software development was gaining steam. From our humble beginning as core contributors to Apache Maven, to supporting the world’s largest repository of open source components (Central), to distributing the world's most popular repository manager (Nexus), we’ve played a meaningful role in helping the world embrace the power of open innovation. We empower developers and security professionals with intelligent tools to innovate more securely at scale. Our platform addresses every element of an organization’s entire software development life cycle, including third-party open source code, first-party source code, and containerized code. Sonatype identifies critical security vulnerabilities and code quality issues and reports results directly to developers when they can most effectively fix them. This helps organizations develop consistently high-quality, secure software which fully meets their business needs and those of their end-customers and partners. More than 2,000 organizations, including 70% of the Fortune 100, and 15 million software developers rely on our tools and guidance to help them deliver and maintain exceptional and secure software.
Why Work With Us
We're on a mission to change how the world innovates by making software development easier. Already used by 15 million developers, we have lofty goals for our technology to be in the hands of every engineering team. And, we need you to do that. Join us!
Gallery
