Remote Technical Product Manager - Mobile Security & Antifraud

About the role

Salmon is a fintech company building a banking and lending platform across Southeast Asia, starting in the Philippines. It is looking for a dedicated product manager to own mobile security and antifraud, as the number of products, channels and integrations grows and customer protection regulations become stricter. The role is fully remote, with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8).

Key responsibilities

• Assess the current mobile app architecture and security posture and define its evolution over the next 12+ months.
• Prioritize incoming security and antifraud work, including InfoSec findings, by risk, impact and effort.
• Turn antifraud and risk requirements into product decisions and clear engineering tasks, working with mobile, backend, security, antifraud, data science and compliance teams.
• Own the roadmap for mobile security and antifraud, including objectives, success measures, scope and release sequencing.
• Own authentication and identity verification: passwords, OTP, biometrics, passkeys, Google and Apple login, account recovery, selfie verification, face matching and liveness detection.
• Own device enrollment, trusted-device management and app protection: app integrity, root/jailbreak detection and device attestation.
• Define risk-based controls for sensitive actions and transactions, including step-up authentication and real-time fraud signals.
• Track new fraud schemes and attack vectors and turn findings into product changes.
• Protect customers from account takeover, identity fraud and account abuse while balancing security with authentication conversion.

Required profile

• 4+ years in product management, including 2+ years owning mobile security, antifraud, authentication or identity products.
• Track record of owning a domain end-to-end: discovery, prioritization, rollout and performance evaluation.
• Ability to turn security and risk requirements into clear specs and engineering tasks.
• Intermediate English.

Required skills

• Technical foundation in iOS/Android app architecture and common mobile vulnerabilities (OWASP Mobile Top 10)
• Working SQL for analyzing fraud and security data

What we offer

• Fully remote work with core collaboration hours 12:00-6:00 PM Manila time
• Company-provided tools and equipment
• Health and time off, medical insurance support for you and your family, and 22 vacation days, Philippine public holidays and 15 sick days
• Internal expert meetups, external conferences, speaking opportunities and industry publications
• Company-sponsored trips to Manila and a beach house week for high-performing teams