America is under sustained cyber attack. Our adversaries infiltrate our networks, steal our IP, and degrade the digital infrastructure that modern life runs on. They’ve learned—correctly—that those attacks rarely produce consequences.
Twenty was founded to change that, by making our adversaries think twice before they attack us. Our vision is American and allied primacy in cyberspace—a future where they cannot contest us, deterrence is assured, and the free world remains secure.
Founded in 2024, Twenty Technologies (www.twenty.io) industrializes offensive cyber operations for the U.S. and its allies. Headquartered in Arlington, Virginia, Twenty has raised $168M from Khosla Ventures, Accel, Caffeinated Capital, Friends & Family Capital, Point72 Ventures, General Catalyst, and In-Q-Tel.
Mission | On Site | Full Time | U.S. Citizenship Required / No Active Clearance Required
Twenty builds AI-enabled technology for mission-critical cyber operations. We're seeking a Staff Product Manager to own data and platform services that power applications and agentic workflows across our product ecosystem. You’ll treat engineers as your customers, turn common needs into reusable capabilities, and align teams on the interfaces, reliability standards, and investments that help them build quickly and safely. You will be building platform services that enable the creation highly complex and autonomous offensive cyber capabilities.
You're fluent in some aspect of cyber related workflows, and can earn trust with security researchers, engineers, and mission-facing users.
You can translate complex technical problems into clear product choices and useful, intuitive experiences.
You're comfortable with ambiguity, high accountability, and hands-on collaboration.
You communicate clearly and bring sound product judgment to complex technical and security tradeoffs.
Own discovery, roadmap, prioritization, requirements, delivery, and iteration for offensive-security and vulnerability-management capabilities.
Learn how practitioners conduct nation state level cyber operations; turn those workflows into clear, actionable product experiences.
Partner with engineers and mission-facing users to define useful findings, workflow integrations, data needs, and reliable technical behavior.
Make product tradeoffs across speed, usability, accuracy, auditability, and legal frameworks.
Set meaningful success metrics, gather user feedback, and use what you learn to improve the product.
Communicate product strategy, roadmap choices, and technical tradeoffs clearly to leadership and delivery teams.
Substantive experience in at least one of: offensive cyber operations (OCO), vulnerability research, attack surface management, vulnerability management, incident response, adversary hunt, cyber threat intelligence, penetration testing, or red teaming.
Strong product judgment and the ability to turn technical needs into user-centered product direction. Formal PM experience is helpful; demonstrable ownership and shipped outcomes matter most.
Ability to work credibly with engineers and practitioners on integrations, data quality, workflows, and security tradeoffs.
Comfort with ambiguity, high accountability, and hands-on collaboration.
Experience with offensive-security or vulnerability-focused platforms built for expert users.
Exposure to vulnerability intelligence, adversary emulation, security research, or technical mission workflows.
Experience with 0-to-1 product development, data-rich security tools, or AI-assisted security workflows.
Benefits
What's on the table:
Health. Medical, dental, and vision plan options. Life / AD&D, disability coverage options.
Family. Paid parental leave for eligible full-time employees. 12 weeks for birthing parents, 4 for non-birthing parents, 6 weeks for adoptive, foster, or intended parents through surrogacy.
Vacation. Paid holidays and flexible PTO. Take what you need.
Retirement. 401(k) with pre-tax and Roth options. HSA/FSA options, dependent care FSA.
Benefits vary by location, role, and eligibility. Full plan details provided during the interview and offer process.
If this role sounds like you, apply and share with us your interest
Due to U.S. government contract and security requirements, this role is limited to U.S. citizens. Some positions may also require eligibility to obtain and maintain a U.S. Government security clearance. Any active clearance requirement will be listed in the role description.
Twenty is an equal opportunity employer. We consider all qualified applicants without regard to race, color, religion, sex, sexual orientation, gender identity, national origin, age, veteran status, disability, or any other protected status, consistent with applicable law.
If you need a reasonable accommodation during the hiring process, let us know and we will work with you.
Skills Required
- Substantive experience in offensive cyber operations, vulnerability research, attack surface management, vulnerability management, incident response, adversary hunting, cyber threat intelligence, penetration testing, or red teaming
- Strong product judgment and ability to translate technical needs into user-centered product direction
- Ability to work credibly with engineers and practitioners on integrations, data quality, workflows, and security tradeoffs
- Comfort with ambiguity, high accountability, and hands-on collaboration
- U.S. citizenship
- Experience with offensive-security or vulnerability-focused platforms for expert users
- Exposure to vulnerability intelligence, adversary emulation, security research, or technical mission workflows
- Experience with zero-to-one product development, data-rich security tools, or AI-assisted security workflows
What We Do
Twenty builds cyber technologies that protect democracies worldwide, developing revolutionary technologies that operate at the intersection of the cyber and electromagnetic domains.
