About Bureau

Bureau is a unified risk decisioning platform for Compliance, Fraud, and Transaction risks. Our platform is a single decision-making engine, powered by a 1 billion+ identity knowledge graph. Over 150 Banks, fintechs, retailers, and digital platforms use Bureau to verify identities faster and stop fraud earlier globally.

Bureau has raised $50M+ from renowned Silicon Valley and global investors including Sorenson Capital and PayPal Ventures and is expanding rapidly from APAC to Americas, Europe, and beyond.

Why Bureau?

Bureau is building the infrastructure that makes digital identities and transactions safe and trustworthy for billions of people. The mission is big, the problems are complex, and the impact is real.

We hire people who want that level of responsibility. People who move fast, build systems from scratch, and care deeply about turning strategy into execution. If you want predictability or narrow scope, this won't be your place. If you want to shape how a scaling global company operates—keep reading.

About the Role: Product Manager - RASP

You will own Bureau RASP (Runtime Application Self-Protection). It is a rare chance to take a category-defining security product from launch to scale.

• Sophisticated mobile fraud now executes inside the app itself. Bureau RASP answers with a four-layer Zero Trust framework embedded in the customer's app:

• Application integrity: code obfuscation, anti-tampering and anti-debugging, powered by XVM, our proprietary virtualization engine.

• Runtime and environment: detection of root, jailbreak, emulators, cloned apps, hooking and overlay attacks.

• Network and data channel: protection against MITM, packet sniffing, geo spoofing and VPN or proxy bypass.

• Visibility and policy: monitor, warn or block per threat from a dashboard, with immutable audit logs.

It is built at the OS level, goes live in minutes with no code changes, and feeds runtime signals into Bureau's Graph Identity Network. You will decide where it goes next.

What you’ll be doing

• Own the RASP vision, strategy and roadmap across Android and iOS.

• Track the mobile threat landscape and turn new attack patterns into shipped protections.

• Partner with security, SDK and platform engineers to deliver detections that are accurate, hard to bypass and light on app performance.

• Shape the customer experience: zero-code onboarding, the policy engine, alerts and audit reporting.

• Connect RASP signals with Device Intelligence, Behavioural Biometrics and the Graph Identity Network to create value no standalone RASP can match.

• Work with sales, solutions and marketing on positioning, pricing, demos and competitive wins.

• Spend time with CISOs, fraud heads and app teams at banks, fintechs and e-commerce firms to learn what they need.

• Define success metrics such as adoption, detection efficacy, false positives and integration time, and report on them.

What You’ll Bring

Must have

• 4-6 years in product management, with at least 2 years on a B2B security, fraud or mobile SDK product.

• Working knowledge of mobile app security: Android and iOS internals, reverse engineering, rooting, hooking and tampering.

• Comfort going deep with engineers on technical trade-offs, and going wide with customers on business outcomes.

• A record of taking a product from early release to enterprise adoption.

• Clear writing and sharp prioritisation.

Good to have

• Experience with RASP, app shielding, device fingerprinting or mobile threat defence.

• Exposure to BFSI or fintech customers and regulatory expectations for app security.

• An engineering or security research background.

Our Culture

• We hire self-motivated people and get out of their way

• We value performance, not hours worked

• Speed, ownership, and impact matter most

Compensation

• Competitive salary + potential equity

• Health benefits, flexible PTO, learning budget