Startups

To bring PLG to cybersecurity, let’s change our hiring habits

Comment

apple among chocolate doughnuts; hiring for cybersecurity PLG
Image Credits: Peter Dazeley (opens in a new window) / Getty Images

Ross Haleliuk

Contributor

Ross Haleliuk is an investor and head of product at LimaCharlie.io.

More posts from Ross Haleliuk

Product-led growth (PLG) is more about the company’s mindset than it is about the product. There is a lot a company needs to do to succeed with a PLG strategy, and hiring product managers is not enough — neither can it be the first step. However, having the ability to attract the right talent is critical.

For product-led growth to become commonplace in cybersecurity, there needs to be enough product talent with the right mindset and level of maturity required for PLG. However, cybersecurity is a deeply specialized discipline, so while the specialized security knowledge isn’t mandatory, it does help ease the learning curve.

There lies the fundamental challenge in hiring product managers in cybersecurity who have experience working with PLG. The inherent complexity of cybersecurity makes it harder for outsiders to hit the ground running quickly. Companies understand that, so they default to hiring product managers with background or experience working in security. And, product managers with experience in cybersecurity often have little experience of building an effective product culture or working in PLG companies in general.

It’s not uncommon to see cybersecurity startups trying to do two things at once. On one hand, they recognize that being resourceful, agile and innovative is their only way to succeed. They want to embrace product-led growth, experiment with new ways to get in front of customers and build a strong culture focused on adding value and solving hard problems.

On the other hand, they value industry experience, so they end up hiring product, sales and marketing professionals from large, enterprise companies who come with already formed ideas about “how the industry works and what it takes to build/sell products.”

If you hire a bunch of experienced people from prominent cybersecurity enterprises, what you get is not PLG; you get the enterprise.

Where to look for product leaders with a passion for PLG

To see more PLG startups in cybersecurity, we need to break our hiring habits. Here are a few actionable ways to do it.

Hire people with no background in security

If you choose to only hire people with cybersecurity product management experience, you are limiting your options to those who have worked in the large enterprises you’re trying to disrupt. Why do you think they’ll innovate after joining your startup?

While a strong understanding of security is important for many technical product management roles, problem areas such as product adoption, activation, engagement and retention can most definitely be owned by product leaders with experience in other industries.

Shortening the time to value looks similar no matter the industry — don’t get swayed by the “15 years of experience” argument. It doesn’t take that long to understand the industry, and I am proud to be a living example of this.

Hire people with experience in developer tools

As cybersecurity matures, it is starting to look more and more like software engineering. This is where product managers with experience building developer tools can add a lot of value. They often possess both solid technical backgrounds and experience with product-led growth — a powerful combination for technical security products targeting security engineers, security architects and other technical security professionals.

Today, it’s relatively easy to find product leaders who have a combination of PLG and developer focus.

Hire people with experience in the consumer space

B2B enterprises are about two to five years behind when it comes to customer expectations. Users today expect B2C experiences all around. If it takes you 15 minutes to sign up for a ride-share app and get to another part of the town, it can’t take you four weeks to get access to the cybersecurity product.

Look for product managers with strong customer empathy, the ability to make data-informed decisions and a keen eye for user experience.

Hire people passionate about their craft

Hire product managers passionate about building great products. Look for people who maintain a connection with the product community, read a lot, ask the right questions and continuously expand their network.

Great ideas rarely emerge when a few folks from the same industry complain about the same problem; they are born at the intersection of experiences, ideas, approaches and industries.

What to look for when hiring product managers

Among the many skills and capabilities that make product managers successful, look for the following when hiring product leaders for PLG startups.

The ability to build bridges

Embracing a product-led growth mindset in traditional marketing- or sales-led organizations requires a lot of change management, communication and building bridges. That’s true for startups choosing to be PLG from day one.

While good communication skills are important for anyone working on product, it is especially critical for those shaping the organizational change.

A beginner mindset

Cybersecurity is a very dynamic industry, so preserving a beginner’s mindset is a prerequisite for a successful product career in this space. Maintaining curiosity, listening more than talking, maintaining a low ego and continuously looking to improve will help to stay on top of any changes and industry shifts.

Customer discovery

Customer discovery is a critical skill for product managers in PLG companies.

To understand and deliver what users value, they need to be able to dig beyond the surface, develop continuous discovery habits, practice active listening, ask powerful questions and draw insights from qualitative and quantitative data.

User experience

User experience is critical for PLG startups. Product managers should have a passion for good user experience and be interested in collaborating with designers, engineers, user researchers and other professionals to make good decisions.

A focus on metrics

People leading product in PLG cybersecurity startups should have a solid grasp of metrics relevant to product-led companies, including:

  • Time to value.
  • Average revenue per user.
  • Customer lifetime value.
  • Virality and network effects.
  • Expansion revenue.
  • Cost of revenue.

It is not enough to understand what they are; it’s critical to understand how they all work together and impact one another and how each one can be moved.

What to consider before hiring product managers

Product-led growth is much more than a go-to-market strategy — it is an organizational mindset that defines how the company thinks, makes decisions and executes. Hiring the right talent is a prerequisite for successfully embracing PLG, but it is not nearly enough.

Before expanding the team, companies looking to adopt PLG should closely examine both their readiness for change and the willingness to commit and do what’s required to get it right. This includes:

  • If a company is transitioning from a traditional, sales-led model, it must be truly willing to disrupt itself, giving product leaders the control and the level of influence to drive revenue, user acquisition and business growth.
  • Ensuring that customers are happy with the level of support the company provides and closing gaps (if any). For PLG to be successful, customers will need to be happy to keep using the product and not churn.
  • Looking for ways to align the whole organization around the PLG strategy. It’s the job of the company leadership to get all functions on board with the future vision and give them certainty about their future in this new world.
  • Working with sales, marketing and customer service to ensure that they are ready to change the way they have worked before and have what they need to succeed in the new world. Make hiring decisions to ensure that the people performing and leading these functions can thrive in a PLG environment.
  • Being intentional about organizational design and finding ways to reduce conflict, build empowered cross-functional teams and foster collaboration across the company.

Hiring good product leaders is hard, but it’s also the easiest out of all the things the company needs to get right for the PLG to succeed.

Closing thoughts

Over the past five years, customer expectations have been shifting toward easy-to-use, easy-to-evaluate and easy-to-buy solutions. The cybersecurity industry is just starting to realize the importance of embracing new ways of thinking and doing business — one example of such innovation is the move from sales- and marketing-led growth to product-led growth.

Cybersecurity companies that can get out of the short-term mindset and become open to hiring PLG product leaders without a background in security will set themselves up for success in the long term. Other B2B industries, the consumer space and developer tools can provide a healthy pipeline of product talent a product-led company will need to succeed.

More TechCrunch

Line Man Wongnai, an on-demand food delivery service in Thailand, is considering an initial public offering on a Thai exchange or the U.S. in 2025.

Thai food delivery app Line Man Wongnai weighs IPO in Thailand, US in 2025

The problem is not the media, but the message.

Apple’s ‘Crush’ ad is disgusting

Ever wonder why conversational AI like ChatGPT says “Sorry, I can’t do that” or some other polite refusal? OpenAI is offering a limited look at the reasoning behind its own…

OpenAI offers a peek behind the curtain of its AI’s secret instructions

The federal government agency responsible for granting patents and trademarks is alerting thousands of filers whose private addresses were exposed following a second data spill in as many years. The…

US Patent and Trademark Office confirms another leak of filers’ address data

As part of an investigation into people involved in the pro-independence movement in Catalonia, the Spanish police obtained information from the encrypted services Wire and Proton, which helped the authorities…

Encrypted services Apple, Proton and Wire helped Spanish police identify activist

Match Group, the company that owns several dating apps, including Tinder and Hinge, released its first-quarter earnings report on Tuesday, which shows that Tinder’s paying user base has decreased for…

Match looks to Hinge as Tinder fails

Private social networking is making a comeback. Gratitude Plus, a startup that aims to shift social media in a more positive direction, is expanding its wellness-focused, personal reflections journal to…

Gratitude Plus makes social networking positive, private and personal

With venture totals slipping year-over-year in key markets like the United States, and concern that venture firms themselves are struggling to raise more capital, founders might be worried. After all,…

Can AI help founders fundraise more quickly and easily?

Google has found a way to bring a variation of its clever “Circle to Search” gesture to iPhone users. The new interaction, launched in January, allows Android users to search…

Google brings a variation on ‘Circle to Search’ to iPhone users

A new sculpture going live on Wednesday in the Flatiron South Public Plaza in New York is not your typical artwork. It combines technology, sociology, anthropology and art to let…

Always-on video portal lets people in NYC and Dublin interact in real time

Apple’s iPad event had a lot to like. New iPads with new chips and new sizes, a new Apple Pencil, and even some software updates. If you are a big…

TechCrunch Minute: When did iPads get as expensive as MacBooks?

Autonomous, AI-based players are coming to a gaming experience near you, and a new startup, Altera, is joining the fray to build this new guard of AI agents. The company announced…

Bye-bye bots: Altera’s game-playing AI agents get backing from Eric Schmidt

Google DeepMind has taken the wraps off a new version of AlphaFold, their transformative machine learning model that predicts the shape and behavior of proteins. AlphaFold 3 is not only…

Google DeepMind debuts huge AlphaFold update and free proteomics-as-a-service web app

Uber plans to deliver more perks to Uber One members, like member-exclusive events, in a bid to gain more revenue through subscriptions.  “You will see more member-exclusives coming up where…

Uber promises member exclusives as Uber One passes $1B run-rate

We’ve all seen them. The inspector with a clipboard, walking around a building, ticking off the last time the fire extinguishers were checked, or if all the lights are working.…

Checkfirst raises $1.5M pre-seed to apply AI to remote inspections and audits

Close to a decade ago, brothers Aviv and Matteo Shapira co-founded a company, Replay, that created a video format for 360-degree replays — the sorts of replays that have become…

Controversial drone company Xtend leans into defense with new $40 million round

Usually, when something starts to rot, it gets pitched in the trash. But Joanne Rodriguez wants to turn the concept of rot on its head by growing fungus on trash…

Mycocycle uses mushrooms to upcycle old tires and construction waste

Monzo has raised another £150 million ($190 million), as the challenger bank looks to expand its presence internationally — particularly in the U.S. The new round comes just two months…

UK challenger bank Monzo nabs another $190M as US expansion beckons

iRobot has announced the successor to longtime CEO, Colin Angle. Gary Cohen, who previous held chief executive role at Timex and Qualitor Automotive, will be heading up the company, marking a major…

iRobot names former Timex head Gary Cohen as CEO

Reddit — now a publicly-traded company with more scrutiny on revenue growth — is putting a big focus on boosting its international audience, starting with francophones. In their first-ever earnings…

Reddit tests automatic, whole-site translation into French using LLM-based AI

Mushrooms continue to be a big area for alternative proteins. Canada-based Maia Farms recently raised $1.7 million to develop a blend of mushroom and plant-based protein using biomass fermentation. There’s…

Meati Foods bites into another $100M amid growth to 7,000 retail locations

Cleaning the outside of buildings is a dirty job, and it’s also dangerous. Lucid Bots came on the scene in 2018 with its Sherpa line of drones to clean windows…

Lucid Bots secures $9M for drones to clean more than your windows

High interest rates and financial pressures make it more important than ever for finance teams to have a better handle on their cash flow, and several startups are hoping to…

Israeli startup Panax raises a $10M Series A for its AI-driven cash flow management platform

The European Union has deepened the investigation of Elon Musk-owned social network, X, that it opened back in December under the bloc’s online governance and content moderation rulebook, the Digital Services Act…

EU grills Elon Musk’s X about content moderation and deepfake risks

For the founders of Atlan, a data governance startup, data has always been at the heart of what they do, even before they launched the company. In fact, co-founders Prukalpa…

Atlan scores $105M for its data control plane, as LLMs boost importance of data

It is estimated that about 2 billion people, especially those in lower and middle-income countries, lack access to quality and affordable essential medicines. The situation is exacerbated by low-quality or even killer…

Axmed raises $2M from Founderful to streamline drug supply chains in underserved markets

For decades, the Global Positioning System (GPS) has maintained a de facto monopoly on positioning, navigation and timing, because it’s cheap and already integrated into billions of devices around the…

Xona Space Systems closes $19M Series A to build out ultra-accurate GPS alternative

Bankruptcy lawyers representing customers impacted by the dramatic crash of cryptocurrency exchange FTX 17 months ago say that the vast majority of victims will receive their money back — plus interest. The…

FTX crypto fraud victims to get their money back — plus interest

On Wednesday, Google launched its digital wallet in India with local integrations, nearly two years after the app was relaunched as a digital wallet platform in the U.S. As TechCrunch exclusively reported last month,…

Google Wallet is now available in India

Bluesky has launched a new product roadmap for the coming months. The decentralized social network said on Tuesday that it is planning to introduce direct messages, support for videos, improved…

Bluesky to add DMs, video support and in-app custom feed curation