Compensation: €60-80k base + 0.05% BSCPE depending on seniority and scope
Reporting line: Direct report to Antoine (CTO), working day-to-day with Hugo (PM) and Gabin (Security PM), in tandem with Mathieu (Head of Engineering) and the 4 leads of the tech teams
Product team: PM + Security PM + you
Engineering Team: 15 Engineers, 4 Technical Leads
___
About Escape
Escape is offensive security for the teams that are 100x outnumbered. We build AI agents that find and exploit vulnerabilities in modern applications, APIs, and microservices: the way a real attacker would, but at the speed of a CI pipeline.
We're a Y Combinator W23 company. We just closed an $18M Series A in March 2026 led by Balderton Capital (with Uncorrelated Ventures, IRIS, and YC following on). Our customers and partners include Zoom, Schibsted, Wiz, Pandadoc, and a growing list of teams who've stopped pretending annual pen tests are enough. We're 40 people split between Paris and NYC, scaling to 80 in the next 12 months
The product surface is real: ASM, business-logic-aware DAST, and AI Pentesting GA-ing this year. The competitive thesis is that LLMs collapsed the cost of offensive engineering by 1000x, and the companies that ship that capability into production first will own the next decade of the category. We're betting we're those companies.
___
The role
👉 We are seeking a Technical Product Manager to join Escape and drive the evolution of our security platform alongside our Product Team, lead by our CTO Antoine. This role is central to shaping what we build, why we build it, and how it delivers value to our customers.
This is a high-impact, hands-on individual contributor role reporting to the CTO and working day-to-day with Hugo (Product Manager) and Gabin (Security Product Manager). Your mission is to turn customer pain and company strategy into exceptional shipping: customer-backed specs, flawless releases, and product decisions grounded in deep technical reality.
You'll work side-by-side with engineering, security research, sales, and marketing to ensure Escape stays best-in-class in application security as we scale as a B2B SaaS product.
Why this role exists, right now
LLMs are deeply rewriting the rules of offensive and defensive security. Off-the-shelf models are already better than most dedicated scanners at finding vulnerabilities, and the gap is widening every quarter. The bar for what counts as a "useful security product" has been reset.
In response, we are launching a new generation of products over the next several months: products that go beyond what classical scanners can do, exploit what frontier AI makes newly possible, and address the new defensive surface created by AI-powered attackers. Several of these are being incubated jointly with the Security Research team we are building in parallel (see our open AI Engineer (Security Research) role).
This TPM hire exists specifically to ship those products well: take novel research output and customer pain, translate them into specs that engineering can execute, and land releases that customers actually adopt. If you join, the next 6 to 12 months are about turning a product thesis into shipped revenue, not iterating on an established roadmap.
___
Key Responsibilities
Customer-Centric Discovery: Engage directly with customers and prospects to understand their pain points, validate assumptions, and inform product decisions through qualitative and quantitative insights.
Feature Conception: Turn problems and feedback into well-scoped feature proposals, flows, and detailed specs.
Execution, Delivery & QA: Translate product strategy into clear, actionable requirements, working closely with engineering teams to ensure timely and high-quality delivery.
Cross-Functional Coordination: Be a reliable point of coordination between engineering, security research, sales, and marketing to align on priorities, trade-offs, and outcomes.
Security Domain Mastery: Develop and maintain a strong understanding of application security concepts to make informed product and prioritization decisions.
Marketing Coordination: Translate upcoming releases into crisp persona / why / what messaging and coordinate timelines so Marketing can launch effectively.
What success looks like at 12 months:
At least one of our new AI-era security products has shipped under your ownership and is generating revenue or pipeline
Predictable, high-quality release cadence with measurable customer impact on the surfaces you own
Specs that engineering trusts and customers immediately understand
A clear track record of features that moved retention, expansion, or competitive positioning
Real domain depth in application security, recognized internally and by customer
___
Who we're looking for
You probably have most of these:
3 to 6 years of product management experience, including at least 2 years owning a B2B SaaS product surface end-to-end.
Strong technical fluency: you can read API specs, debate architecture trade-offs with engineers, and read code well enough to ground your specs in reality. A CS / engineering background is a strong plus.
Track record of shipping: concrete examples where you turned customer pain into specs, into shipped features, into measurable revenue or retention impact.
Cybersecurity exposure: prior work in application security, AppSec, DevSecOps, API security, or related fields is highly preferred. If you don't have it, you should be obsessed with the space.
Customer-facing instinct: you actively want to be in calls with customers and prospects. You do not see this as a chore.
Crisp written communication: your specs and updates should be readable in 5 minutes and unambiguous.
Written and verbal English at native or near-native level. Fluency in French is also required.
___
Perks
💸 Significant equity (Stock Options / BSPCE), making you a true stakeholder in our success.
❤️🩹 Top-tier health insurance with Alan
🍕 Meal vouchers with Swile
💪 Sport subscription with EGYM Wellpass (ex Gymlib)
📚 A place to learn and grow: access to books and online courses to help you excel in your role
💻 Top-tier equipment to do your best work
🎁 Free time to work on cool open-source projects
🌎 International conference travel: present research and engineering work at RSAC, BSides, Black Hat, DEF CON, APIDays (New York, Las Vegas, San Francisco, London, Paris, Berlin, Barcelona)
___
Why now?
We are at the precise moment when AI is rewriting the security industry. Every product decision Escape makes in the next 12 months will compound for years.
If you want to do hands-on product at a YC-backed company that is genuinely shaping a category, and you want to do it in Paris with a fast, technical team, send us:
A short note on a B2B product decision you owned that you're proud of, and why.
One thing you'd want to change about Escape's product after 30 minutes on our docs and website.
No cover letters required. We read every application ourselves.
About Escape
Replace legacy scanners and manual offensive security processes with AI agents that discover, test, and remediate directly in your engineering workflows.
