head of product vulnerability