Startups

To bring PLG to cybersecurity, let’s change our hiring habits

Comment

apple among chocolate doughnuts; hiring for cybersecurity PLG
Image Credits: Peter Dazeley (opens in a new window) / Getty Images

Ross Haleliuk

Contributor

Ross Haleliuk is an investor and head of product at LimaCharlie.io.

More posts from Ross Haleliuk

Product-led growth (PLG) is more about the company’s mindset than it is about the product. There is a lot a company needs to do to succeed with a PLG strategy, and hiring product managers is not enough — neither can it be the first step. However, having the ability to attract the right talent is critical.

For product-led growth to become commonplace in cybersecurity, there needs to be enough product talent with the right mindset and level of maturity required for PLG. However, cybersecurity is a deeply specialized discipline, so while the specialized security knowledge isn’t mandatory, it does help ease the learning curve.

There lies the fundamental challenge in hiring product managers in cybersecurity who have experience working with PLG. The inherent complexity of cybersecurity makes it harder for outsiders to hit the ground running quickly. Companies understand that, so they default to hiring product managers with background or experience working in security. And, product managers with experience in cybersecurity often have little experience of building an effective product culture or working in PLG companies in general.

It’s not uncommon to see cybersecurity startups trying to do two things at once. On one hand, they recognize that being resourceful, agile and innovative is their only way to succeed. They want to embrace product-led growth, experiment with new ways to get in front of customers and build a strong culture focused on adding value and solving hard problems.

On the other hand, they value industry experience, so they end up hiring product, sales and marketing professionals from large, enterprise companies who come with already formed ideas about “how the industry works and what it takes to build/sell products.”

If you hire a bunch of experienced people from prominent cybersecurity enterprises, what you get is not PLG; you get the enterprise.

Where to look for product leaders with a passion for PLG

To see more PLG startups in cybersecurity, we need to break our hiring habits. Here are a few actionable ways to do it.

Hire people with no background in security

If you choose to only hire people with cybersecurity product management experience, you are limiting your options to those who have worked in the large enterprises you’re trying to disrupt. Why do you think they’ll innovate after joining your startup?

While a strong understanding of security is important for many technical product management roles, problem areas such as product adoption, activation, engagement and retention can most definitely be owned by product leaders with experience in other industries.

Shortening the time to value looks similar no matter the industry — don’t get swayed by the “15 years of experience” argument. It doesn’t take that long to understand the industry, and I am proud to be a living example of this.

Hire people with experience in developer tools

As cybersecurity matures, it is starting to look more and more like software engineering. This is where product managers with experience building developer tools can add a lot of value. They often possess both solid technical backgrounds and experience with product-led growth — a powerful combination for technical security products targeting security engineers, security architects and other technical security professionals.

Today, it’s relatively easy to find product leaders who have a combination of PLG and developer focus.

Hire people with experience in the consumer space

B2B enterprises are about two to five years behind when it comes to customer expectations. Users today expect B2C experiences all around. If it takes you 15 minutes to sign up for a ride-share app and get to another part of the town, it can’t take you four weeks to get access to the cybersecurity product.

Look for product managers with strong customer empathy, the ability to make data-informed decisions and a keen eye for user experience.

Hire people passionate about their craft

Hire product managers passionate about building great products. Look for people who maintain a connection with the product community, read a lot, ask the right questions and continuously expand their network.

Great ideas rarely emerge when a few folks from the same industry complain about the same problem; they are born at the intersection of experiences, ideas, approaches and industries.

What to look for when hiring product managers

Among the many skills and capabilities that make product managers successful, look for the following when hiring product leaders for PLG startups.

The ability to build bridges

Embracing a product-led growth mindset in traditional marketing- or sales-led organizations requires a lot of change management, communication and building bridges. That’s true for startups choosing to be PLG from day one.

While good communication skills are important for anyone working on product, it is especially critical for those shaping the organizational change.

A beginner mindset

Cybersecurity is a very dynamic industry, so preserving a beginner’s mindset is a prerequisite for a successful product career in this space. Maintaining curiosity, listening more than talking, maintaining a low ego and continuously looking to improve will help to stay on top of any changes and industry shifts.

Customer discovery

Customer discovery is a critical skill for product managers in PLG companies.

To understand and deliver what users value, they need to be able to dig beyond the surface, develop continuous discovery habits, practice active listening, ask powerful questions and draw insights from qualitative and quantitative data.

User experience

User experience is critical for PLG startups. Product managers should have a passion for good user experience and be interested in collaborating with designers, engineers, user researchers and other professionals to make good decisions.

A focus on metrics

People leading product in PLG cybersecurity startups should have a solid grasp of metrics relevant to product-led companies, including:

  • Time to value.
  • Average revenue per user.
  • Customer lifetime value.
  • Virality and network effects.
  • Expansion revenue.
  • Cost of revenue.

It is not enough to understand what they are; it’s critical to understand how they all work together and impact one another and how each one can be moved.

What to consider before hiring product managers

Product-led growth is much more than a go-to-market strategy — it is an organizational mindset that defines how the company thinks, makes decisions and executes. Hiring the right talent is a prerequisite for successfully embracing PLG, but it is not nearly enough.

Before expanding the team, companies looking to adopt PLG should closely examine both their readiness for change and the willingness to commit and do what’s required to get it right. This includes:

  • If a company is transitioning from a traditional, sales-led model, it must be truly willing to disrupt itself, giving product leaders the control and the level of influence to drive revenue, user acquisition and business growth.
  • Ensuring that customers are happy with the level of support the company provides and closing gaps (if any). For PLG to be successful, customers will need to be happy to keep using the product and not churn.
  • Looking for ways to align the whole organization around the PLG strategy. It’s the job of the company leadership to get all functions on board with the future vision and give them certainty about their future in this new world.
  • Working with sales, marketing and customer service to ensure that they are ready to change the way they have worked before and have what they need to succeed in the new world. Make hiring decisions to ensure that the people performing and leading these functions can thrive in a PLG environment.
  • Being intentional about organizational design and finding ways to reduce conflict, build empowered cross-functional teams and foster collaboration across the company.

Hiring good product leaders is hard, but it’s also the easiest out of all the things the company needs to get right for the PLG to succeed.

Closing thoughts

Over the past five years, customer expectations have been shifting toward easy-to-use, easy-to-evaluate and easy-to-buy solutions. The cybersecurity industry is just starting to realize the importance of embracing new ways of thinking and doing business — one example of such innovation is the move from sales- and marketing-led growth to product-led growth.

Cybersecurity companies that can get out of the short-term mindset and become open to hiring PLG product leaders without a background in security will set themselves up for success in the long term. Other B2B industries, the consumer space and developer tools can provide a healthy pipeline of product talent a product-led company will need to succeed.

More TechCrunch

Welcome to Week in Review: TechCrunch’s newsletter recapping the week’s biggest news. This week Apple unveiled new iPad models at its Let Loose event, including a new 13-inch display for…

Why Apple’s ‘Crush’ ad is so misguided

The U.K. Safety Institute, the U.K.’s recently established AI safety body, has released a toolset designed to “strengthen AI safety” by making it easier for industry, research organizations and academia…

U.K. agency releases tools to test AI model safety

AI startup Runway’s second annual AI Film Festival showcased movies that incorporated AI tech in some fashion, from backgrounds to animations.

At the AI Film Festival, humanity triumphed over tech

Rachel Coldicutt is the founder of Careful Industries, which researches the social impact technology has on society.

Women in AI: Rachel Coldicutt researches how technology impacts society

SAP Chief Sustainability Officer Sophia Mendelsohn wants to incentivize companies to be green because it’s profitable, not just because it’s right.

SAP’s chief sustainability officer isn’t interested in getting your company to do the right thing

Here’s what one insider said happened in the days leading up to the layoffs.

Tesla’s profitable Supercharger network is in limbo after Musk axed the entire team

StrictlyVC events deliver exclusive insider content from the Silicon Valley & Global VC scene while creating meaningful connections over cocktails and canapés with leading investors, entrepreneurs and executives. And TechCrunch…

Meesho, a leading e-commerce startup in India, has secured $275 million in a new funding round.

Meesho, an Indian social commerce platform with 150M transacting users, raises $275M

Some Indian government websites have allowed scammers to plant advertisements capable of redirecting visitors to online betting platforms. TechCrunch discovered around four dozen “gov.in” website links associated with Indian states,…

Scammers found planting online betting ads on Indian government websites

Around 550 employees across autonomous vehicle company Motional have been laid off, according to information taken from WARN notice filings and sources at the company.  Earlier this week, TechCrunch reported…

Motional cut about 550 employees, around 40%, in recent restructuring, sources say

The deck included some redacted numbers, but there was still enough data to get a good picture.

Pitch Deck Teardown: Cloudsmith’s $15M Series A deck

The company is describing the event as “a chance to demo some ChatGPT and GPT-4 updates.”

OpenAI’s ChatGPT announcement: What we know so far

Unlike ChatGPT, Claude did not become a new App Store hit.

Anthropic’s Claude sees tepid reception on iOS compared with ChatGPT’s debut

Welcome to Startups Weekly — Haje‘s weekly recap of everything you can’t miss from the world of startups. Sign up here to get it in your inbox every Friday. Look,…

Startups Weekly: Trouble in EV land and Peloton is circling the drain

Scarcely five months after its founding, hard tech startup Layup Parts has landed a $9 million round of financing led by Founders Fund to transform composites manufacturing. Lux Capital and Haystack…

Founders Fund leads financing of composites startup Layup Parts

AI startup Anthropic is changing its policies to allow minors to use its generative AI systems — in certain circumstances, at least.  Announced in a post on the company’s official…

Anthropic now lets kids use its AI tech — within limits

Zeekr’s market hype is noteworthy and may indicate that investors see value in the high-quality, low-price offerings of Chinese automakers.

The buzziest EV IPO of the year is a Chinese automaker

Venture capital has been hit hard by souring macroeconomic conditions over the past few years and it’s not yet clear how the market downturn affected VC fund performance. But recent…

VC fund performance is down sharply — but it may have already hit its lowest point

The person who claims to have 49 million Dell customer records told TechCrunch that he brute-forced an online company portal and scraped customer data, including physical addresses, directly from Dell’s…

Threat actor says he scraped 49M Dell customer addresses before the company found out

The social network has announced an updated version of its app that lets you offer feedback about its algorithmic feed so you can better customize it.

Bluesky now lets you personalize main Discover feed using new controls

Microsoft will launch its own mobile game store in July, the company announced at the Bloomberg Technology Summit on Thursday. Xbox president Sarah Bond shared that the company plans to…

Microsoft is launching its mobile game store in July

Smart ring maker Oura is launching two new features focused on heart health, the company announced on Friday. The first claims to help users get an idea of their cardiovascular…

Oura launches two new heart health features

Keeping up with an industry as fast-moving as AI is a tall order. So until an AI can do it for you, here’s a handy roundup of recent stories in the world…

This Week in AI: OpenAI considers allowing AI porn

Garena is quietly developing new India-themed games even though Free Fire, its biggest title, has still not made a comeback to the country.

Garena is quietly making India-themed games even as Free Fire’s relaunch remains doubtful

The U.S.’ NHTSA has opened a fourth investigation into the Fisker Ocean SUV, spurred by multiple claims of “inadvertent Automatic Emergency Braking.”

Fisker Ocean faces fourth federal safety probe

CoreWeave has formally opened an office in London that will serve as its European headquarters and home to two new data centers.

CoreWeave, a $19B AI compute provider, opens European HQ in London with plans for 2 UK data centers

The Series C funding, which brings its total raise to around $95 million, will go toward mass production of the startup’s inaugural products

AI chip startup DEEPX secures $80M Series C at a $529M valuation 

A dust-up between Evolve Bank & Trust, Mercury and Synapse has led TabaPay to abandon its acquisition plans of troubled banking-as-a-service startup Synapse.

Infighting among fintech players has caused TabaPay to ‘pull out’ from buying bankrupt Synapse

The problem is not the media, but the message.

Apple’s ‘Crush’ ad is disgusting

The Twitter for Android client was “a demo app that Google had created and gave to us,” says Particle co-founder and ex-Twitter employee Sara Beykpour.

Google built some of the first social apps for Android, including Twitter and others