About the role
About XBOW At XBOW, we’re redefining the future of cybersecurity by building the world's first autonomous pentester, powered by AI. Today, the gold standard for securing software systems is human pentesters, but with the rise of artificial intelligence, we’re stepping up to scale offensive security to meet the ever-growing demand. AI is transforming the landscape of both cybersecurity and cyberattacks. While millions of people without security expertise are creating software, bad actors are using AI to launch more effective attacks. XBOW fights back with AI-driven superpowers, enabling security teams to stay one step ahead. Backed by Sequoia Capital and Altimeter, and a team that includes the creators of GitHub Copilot and GitHub Advanced Security, XBOW is not just keeping up with the times—we’re shaping the future of cybersecurity. Our mission is simple: to defeat the bad actors before they strike, using AI to revolutionize how we approach offensive security. We’re building something that must be built, and we’re
the team to do it. Join us in shaping the next frontier of autonomous security. Your Role: Application Security Program Manager (Customer Success) We’re looking for a technical-minded Application Security Program Manager to join our founding Customer Success team and help scale a growing and diverse customer base. Your mission: ensure a smooth, reliable experience across the customer journey—while stepping in with just the right level of support as needed. You’ll be a super-owner of the post-sale lifecycle: supporting a high volume of customers with efficiency, structure, and care. Whether guiding user experiences, troubleshooting product questions, or surfacing systemic blockers, you’ll drive continuous improvement across tools, workflows, and customer outcomes. This role blends customer-facing empathy with a TPM’s mindset—you won’t write code, but you’ll need to understand where processes, automation, and product experience can improve the journey. You’ll also help define what scaled success looks like at XBOW. What You’ll Do You'll be working directly with security teams, AppSec leaders, and engineering orgs who are integrating autonomous pentesting into their vulnerability management programs. That means you need to speak their language — understanding how findings map to real risk, how CVSS scoring works, what remediation workflows look like inside their environments, and how XBOW fits into their broader security toolchain. You won't write exploits, but you need to understand what our platform finds, why it matters, and how customers operationalize those results. Serve as the primary point of contact and for a large and growing portfolio of customers Own the end-to-end customer experience across hundreds of accounts; nothing falls through the cracks Deliver a high-touch experience when needed by acting as a problem solver—conduct independent analysis and triage before escalating to internal teams Develop and own repeatable workflows to scale self-service–led entry with product-led expansion Collaborate closely with both product and sales teams to align on strategy and execution Act as an external-facing technical program manager—identify process gaps, advocate for fixes, and recognize when automation is needed, even without writing code Represent the voice of the customer internally to drive adoption and continuous improvement Advocate for product and process changes that reduce friction, automate touchpoints, and improve outcomes Navigate product questions with confidence, escalating appropriately even without deep domain knowledge Translate pentesting findings and vulnerability data into actionable guidance for security and engineering stakeholders Understand application security concepts — OWASP Top 10, CVSS scoring, common vulnerability classes — well enough to field customer questions and contextualize results Work with customers running large-scale assessments across dozens or hundreds of applications, tracking coverage, SLA adherence, and finding trends Partner with Product and Engineering to triage edge cases in scan results, distinguishing between product gaps and expected behavior Build and maintain customer-facing documentation, runbooks, and enablement materials grounded in real product workflows