Company Description

Reva.AI is a unified access control and AI security platform for modern agentic and cloud-native environments. We help security and product teams put dynamic, intent-aware access controls in place and enforce least privilege across human, machine and AI identities.

The platform covers AI workload discovery, behavioral analytics, policy governance and runtime enforcement. Together, these give enterprises the trust layer they need to run AI-driven systems securely at scale. Our mission is to secure the AI era with context-aware, continuously enforced policy and access control, through a unified authorization control plane that governs access across applications, infrastructure, data and AI systems.

What you'll do

Translate business requirements into technical requirements

- Act as the internal product manager for the engineering team. Convert business, customer and security requirements into precise technical requirements: API contracts, policy schemas, data models, integration flows, edge cases and failure modes.
- Write PRDs, functional specs, user stories and acceptance criteria clear enough that an engineer can pick them up without booking a follow-up meeting.
- Own and groom the backlog. Run refinement, sprint planning and prioritization with engineering leads, and keep scope, sequencing and dependencies honest.
- Be the single point of clarification during a sprint. Resolve ambiguity fast so nobody is blocked on "what did the customer actually mean?"
- Maintain traceability from customer ask to requirement to story to release, so nothing promised in a POC quietly disappears.
- Drive release readiness across engineering, design and GTM: documentation, demo scripts and internal enablement.

Shape the product

- Refine the roadmap for adaptive access, runtime guardrails and identity-aware AI security.
- Run competitive analysis across IAM, PAM, ZTNA, AI gateway and AI security products,



and turn it into positioning and roadmap decisions, not just a spreadsheet.
- Prototype workflows and product concepts with AI tools to validate them early, before engineering commits build time.

Work with customers

- Support demos, proofs of concept and onboarding with real domain and product depth.
- Join design-partner and enterprise customer calls, and bring what you hear back into the roadmap the same week.

What we're looking for

Required

- 5–8 years as a Product Manager, Associate PM, Product Owner or Technical Business Analyst in cybersecurity: IAM, PAM, ZTNA, IGA or policy enforcement.
- Proven experience translating business requirements into technical requirements. You've written the spec, not only the slide.
- Strong grasp of policy-as-code and authorization models: RBAC, ABAC, PBAC/ReBAC, OAuth 2.0, OIDC, SAML, JWT, scopes and consent.
- Comfort with APIs, integration flows and system diagrams. You can read an API spec, reason about a sequence diagram and hold your own in an architecture discussion.
- Familiarity with agentic AI security, or robust curiosity about it: prompt injection, tool and function-call abuse, excessive agency, data leakage, identity spoofing and non-human identity.
- Hands-on experience with prototyping tools such as Lovable, Replit, Bolt, Figma or v0.
- Excellent written and verbal communication.
- A bias for action and real comfort with ambiguity.

Nice to have

- A Master's degree in technology, or an MBA.
- Certifications such as CISSP, CISM, CCSP, or IAM-specific credentials (Entra ID, Okta, SailPoint, CyberArk, Ping).
- Hands-on exposure to an authorization engine: Cedar, OPA/Rego, OpenFGA, XACML or similar.
- Experience with the Microsoft stack: Entra ID, Purview, Defender, Azure AI Foundry or Copilot Studio.
- Agile/Scrum experience as a product owner, and fluency with Jira or Linear and Confluence or Notion.
- Early-stage startup or high-growth technology experience.
- Familiarity with emerging agent standards: MCP, A2A and AI gateways.

📌 Associate Product Manager (Bengaluru)
🏢 Reva.AI
📍 Bengaluru