About the role
Remote | UTC+8 | Core collaboration hours: 12:00–6:00 PM Manila Time
Salmon is a technology-driven financial company building a banking and lending platform across Southeast Asia, starting in the Philippines.
We combine global fintech expertise with deep local market knowledge to make financial services simple, accessible, and useful for millions of people across the region.
7M+ app downloads. 2M+ monthly active users. 7,000+ partner stores. US$310M+ raised from leading global investors.
Manila-based, globally distributed, and hybrid-first — our team spans 45+ countries.
If you want to solve complex problems at scale and impact how millions of people access and manage money, come build with us.
Southeast Asia’s fintech moment starts here.
About the role
As products, channels, and integrations multiply and regulatory requirements to protect customers and funds grow, you’ll own mobile security and antifraud as a dedicated product manager.
What you’ll do
- Assess the current mobile app architecture and security posture, and define where it needs to evolve over the next 12+ months.
- Prioritize incoming security and antifraud work, including InfoSec findings, by risk, impact, and effort.
- Turn antifraud and risk requirements into product decisions and clear engineering tasks, working with mobile, backend, security, antifraud, data science, and compliance teams.
What you’ll own
- Own the roadmap for mobile security and antifraud: objectives, success measures, scope, and release sequencing.
- Own authentication and identity verification: passwords, OTP, biometrics, passkeys, Google and Apple login, account recovery, selfie verification, face matching, and liveness detection.
- Own device enrollment, trusted-device management, and app protection: app integrity, root/jailbreak detection, and device attestation.
- Define risk-based controls for sensitive actions and transactions, including step-up authentication and real-time fraud signals built with the antifraud team.
- Track new fraud schemes and attack vectors, and turn findings into product changes.
- Protect customers from account takeover, identity fraud, and account abuse, while balancing security with authentication conversion.
What makes you a strong fit
- 4+ years in product management, including 2+ years owning mobile security, antifraud, authentication, or identity products
- Technical foundation in iOS/Android app architecture and common mobile vulnerabilities (OWASP Mobile Top 10), enough to challenge engineering on technical decisions
- Working SQL for analyzing fraud and security data
- Track record of owning a domain end-to-end: discovery, prioritization, rollout, and performance evaluation
- Ability to turn security and risk requirements into clear specs and engineering tasks
- Intermediate English
What we offer
Ownership and flexibility
- Fully remote work with core collaboration hours from 12:00 to 6:00 PM Manila time (UTC+8)
- Company-provided tools and equipment
Health and time off
- Medical insurance support for you and your family through co-funding or reimbursement, depending on your location and subject to policy limits
- Access to an internal mental health support specialist
- 22 vacation days, Philippine public holidays, and 15 sick days
Growth and team experience
- Opportunities to learn and share your expertise through internal expert meetups, external conferences, speaking opportunities, and industry publications
- Company-sponsored trips to Manila to meet and work with your team in person
- High-performing teams can earn a dedicated beach house week in Southeast Asia