Senior Product Manager, Application Security

Zeta Global is an AI-Powered Marketing Cloud that aims to simplify sophisticated marketing through a unified platform. They are seeking a Senior Product Manager, Application Security to lead the strategy and execution of their Application Security product, ensuring the protection of their platform and data while enabling engineering teams to deliver confidently.

Responsibilities:

• Own the Application Security product strategy and multi-quarter roadmap—from visibility and tooling inventory, through architecture and risk-surface mapping, tool procurement and upgrades, CI/CD enforcement, proactive threat reduction, and scaled institutionalization (Security Champions, architecture review, executive reporting)
• Build and ship the core AppSec product surfaces: AI-powered threat modeling and code evaluation, and a unified security risk, signal, and remediation platform
• Prioritize critical risk surfaces across the Zeta platform
• Define clear requirements, user stories, success metrics, and acceptance criteria for AppSec capabilities
• Drive day-to-day execution with Application Security engineering, platform/DevOps, Architecture, InfoSec, and product engineering pods
• Establish and evolve governance: severity and SLA frameworks, incident intake and escalation, secure coding standards, third-party application integration guardrails, and architecture security review for high-risk changes
• Lead tool strategy and procurement decisions with clear risk justification, coverage gaps, budget tradeoffs, and integration into developer workflows
• Use data and KPIs to measure posture and inform prioritization
• Align AppSec initiatives with company objectives; communicate risk, progress, and asks clearly to engineering and executive stakeholders
• Identify and mitigate delivery and security risks; run post-incident learning loops that convert findings into durable product and process improvements
• Mentor and elevate AppSec and adjacent product/engineering partners; help scale a Security Champions program across the organization
• Comfortably use AI tools as part of everyday product work, and productize AI defensively for threat modeling, triage, code review, and remediation guidance with appropriate human oversight

Requirements:

• 4-6+ years of product management experience, with meaningful ownership of enterprise Application Security, platform security, DevSecOps, or adjacent security-product domains in SaaS/B2B environments
• Deep working knowledge of modern AppSec practices and tooling (SAST, DAST, SCA, container/IaC/secrets scanning, vulnerability management, threat modeling, API security, and secure SDLC)
• Proven ability to drive enterprise-tier security programs: risk-based prioritization, remediation SLAs, cross-org governance, and executive risk communication—not only feature delivery
• Strong technical background (Computer Science or related field preferred); credible with security engineers, architects, and engineering leaders on topics such as authn/authz, multi-tenancy, cryptography boundaries, supply chain, and AI/LLM security risks
• Demonstrated experience shipping developer-facing security products or workflows (CI/CD gates, IDE/MR integrations, security dashboards, or remediation orchestration)
• Excellent communication and stakeholder influence skills across Engineering, InfoSec, DevOps/Infrastructure, Architecture, and leadership
• Proven ability to work independently in ambiguity while building durable process, metrics, and operating cadence
• Experience building or operating AI-assisted security capabilities (threat modeling automation, AI code review, exploitability/reachability-informed triage, or unified findings platforms)
• Familiarity with MarTech/AdTech or other high-scale multi-tenant platforms handling sensitive customer data
• Experience with tool evaluation and vendor management for AppSec platforms (e.g. Snyk, Wiz, Rapid7, or equivalents)