Who We Are

AI is changing how software gets built. Code production is becoming a commodity. The focus is shifting from writing code to orchestrating, verifying, and governing change – and the toolchain is the new constraint.

Gradle is at the center of this shift. We build Develocity, a toolchain observability and intelligence platform used by some of the world's leading software organizations – Netflix, Airbnb, Spotify, SAP, major global banks, and hundreds more. Develocity helps software teams achieve delivery excellence through deep observability, build and test acceleration, and AI-powered intelligence across the entire toolchain – with current support for Gradle Build Tool, Apache Maven™, sbt, npm, and Python.

We are an AI-native company. AI is not a feature we're bolting on – it's central to how we work, how we think about our product, and where we're heading. We're investing deeply in making Develocity's unique data and decades of domain expertise accessible to both humans and AI agents, with trust, evidence, and explainability at the core of everything we build.

We have partnered with the Apache Software Foundation, the Commonhaus Foundation, the Micronaut Foundation, and other OSS projects such as Spring, Quarkus, Kotlin, JUnit, AndroidX, and many more to bring the values of Develocity also to the OSS Community.

Our Values

Seek to Understand: Everything starts with listening and understanding; we strive to understand diverse viewpoints, problems, and motivations. Before we take action, we ensure we truly grasp the challenges, perspectives, and goals.

Know the Why: We approach our work with a clear sense of purpose, ensuring every step is deliberate and focused. We take meaningful action with urgency, but never at the expense of thoughtful consideration.

Innovate & Iterate: We embrace challenges and are not afraid to try new things, even if they might fail. With a deep understanding and a clear purpose, we can develop creative, bold solutions to tackle challenges.

Own the Outcome: We are empowered to take initiative, and we maintain transparency in our work and its outcomes. When we execute, we take responsibility for our decisions, measure the success of our innovations, and learn from the results.

Who You Are

You are an experienced and passionate B2B Senior Product Manager with a proven track record of leading strategy, roadmap, and delivery in the DevOps Toolchain and Build Artifacts space. You have honed your skills at an industry-leading developer tooling company.

You have a deep understanding of software provenance, attestation, and supply chain governance — and you recognize how AI-driven software delivery is making these disciplines more critical and more complex than ever. You are fluent in compliance frameworks such as SLSA and bring experience defining product requirements for provenance data collection across the build process.

You have a strong sense of the full customer lifecycle, from initial discovery through adoption and long-term value realization. You have a keen instinct for translating customer needs and market trends into product decisions that accelerate time-to-value.

A strong cross-functional collaborator, you are equally comfortable working with engineering, sales, and marketing.

Responsibilities

Product Strategy & Vision:

Define and articulate a clear product vision, strategy, and roadmap for provenance and supply chain governance – accounting for how AI-driven development (coding agents, agent swarms, software factories) changes the threat model and compliance landscape.
Conduct thorough market research, competitive analysis, and customer interviews to identify opportunities and unmet needs across cloud, hybrid, and on-premises deployments.
Develop business cases for new product initiatives.

AI Integration:

Establish the product direction for how AI agents and autonomous workflows interact with provenance and compliance, as consumers of attestation data and as subjects that require governance.
Collaborate with the AI strategy team to identify opportunities where Develocity's unique data and domain expertise can power AI-driven provenance capabilities, e.g., automated compliance verification, anomaly detection, and agent-ready provenance APIs.
Stay current with the rapidly evolving AI tooling landscape and evaluate how LLMs, coding agents, and agentic workflows impact software supply chain security.

Requirements & Prioritization:

Gather, analyze, and prioritize product requirements, synthesizing input from all stakeholders, including customers, sales, support, and engineering.
Translate high-level business requirements into prioritized functional requirements with a clean value proposition.
Make pragmatic roadmap prioritization decisions with a clear rationale.

Go-to-market:

Work with sales and marketing to develop go-to-market strategies, product positioning, and messaging.
Develop go-to-market materials to support the enterprise sales motion, such as presentations and demos.
Partner with customer-facing teams to understand and address customer pain points.

Customer & Market Advocacy:

Evangelize for your products, presenting to customers, partners, and at conferences, as well as internally.
Actively engage with industry standards bodies and communities around SLSA, SPDX, in-toto, and other SDLC concerns.
Act as an external thought leader in the provenance and supply chain governance domain.

Minimum Qualifications

Proven experience in product management in a customer-facing, B2B context.
Proven ability to build and manage a pragmatic product roadmap.
Domain knowledge in the following:

SDLC governance, GRC (Governance, Risk, and Compliance), and DORA metrics in an enterprise context.
Software Provenance and Attestation, e.g., SLSA and in-toto
ITSM and Software Asset Management product practices
Build systems, e.g., Gradle Build Tool and Apache Maven
CI/CD practices

Prior experience as a software engineer or a computer science degree.
Strong analytical skills with the ability to leverage data to inform product decisions.
Excellent collaboration and communication skills.

Preferred Qualifications

Deep understanding of security standards and frameworks relevant to the software supply chain, e.g., NIST, CISA, ISO 27001.
Experience with cryptography, signing, and key management practices in a developer tool context.
Experience with building AI-powered products, agentic workflows, or LLM-based tooling.

What We Offer

Shape a greenfield product area at the intersection of supply chain security and AI-driven development.
Close collaboration with an ambitious and experienced team
Opportunities for growth in your career and in leadership responsibilities
In-person meetings, such as our annual company offsite, team meetings, and onboardings
Work from home in a remote-first environment
Competitive salaries and equity grants

Compensation

The US salary range for this position is $190-225k which reflects the target ranges for all US locations. Within this range, individual pay is determined by geographic location and additional factors including but not limited to experience, relevant skills, qualifications, seniority, performance, and travel requirements. Our recruiting team can share more information about the specific salary range for your location during the hiring process.

Location

Remote from the East Coast, USA.

Our team works remotely and is spread across the globe. We coordinate across time zones and stay connected through brief daily syncs — because we believe regular, direct collaboration brings out the best work.