Senior Product Manager, Application Security

WHO WE ARE

Zeta Global (NYSE: ZETA) is the AI-Powered Marketing Cloud that leverages advanced artificial intelligence (AI) and trillions of consumer signals to make it easier for marketers to acquire grow and retain customers more efficiently. Through the Zeta Marketing Platform (ZMP) our vision is to make sophisticated marketing simple by unifying identity intelligence and omnichannel activation into a single platform powered by one of the industrys largest proprietary databases and AI. Our enterprise customers across multiple verticals are empowered to personalize experiences with consumers at an individual level across every channel delivering better results for marketing programs. Zeta was founded in 2007 by David A. Steinberg and John Sculley and is headquartered in New York City with offices around the world. To learn more go to .

About the Role

We are seeking a Senior Product Manager Application Security to own Zetas Application Security product and program end-to-end. You will set strategy prioritize the roadmap and drive delivery of an enterprise-grade AppSec capability that protects Zetas platform data and customers while enabling engineering teams to ship with confidence.

This role sits at the intersection of product security and platform engineering. You will turn our Application Security vision into a system based on secure-by-design practices across the SDLC AI-assisted threat modeling and code review CI/CD enforcement vulnerability prioritization and remediation at scale and executive-ready risk visibility. Success means security is invisible when it should be and highly visible when it must be.

Responsibilities

• Own the Application Security product strategy and multi-quarter roadmapfrom visibility and tooling inventory through architecture and risk-surface mapping tool procurement and upgrades CI/CD enforcement proactive threat reduction and scaled institutionalization (Security Champions architecture review executive reporting).
• Build and ship the core AppSec product surfaces: AI-powered threat modeling and code evaluation and a unified security risk signal and remediation platform.
• Prioritize critical risk surfaces across the Zeta platform.
• Define clear requirements user stories success metrics and acceptance criteria for AppSec capabilities.
• Drive day-to-day execution with Application Security engineering platform/DevOps Architecture InfoSec and product engineering pods.
• Establish and evolve governance: severity and SLA frameworks incident intake and escalation secure coding standards third-party application integration guardrails and architecture security review for high-risk changes.
• Lead tool strategy and procurement decisions with clear risk justification coverage gaps budget tradeoffs and integration into developer workflows.
• Use data and KPIs to measure posture and inform prioritization.
• Align AppSec initiatives with company objectives; communicate risk progress and asks clearly to engineering and executive stakeholders.
• Identify and mitigate delivery and security risks; run post-incident learning loops that convert findings into durable product and process improvements.
• Mentor and elevate AppSec and adjacent product/engineering partners; help scale a Security Champions program across the organization.
• Comfortably use AI tools as part of everyday product work and productize AI defensively for threat modeling triage code review and remediation guidance with appropriate human oversight.

Qualifications

• 4-6 years of product management experience with meaningful ownership of enterprise Application Security platform security DevSecOps or adjacent security-product domains in SaaS/B2B environments.
• Deep working knowledge of modern AppSec practices and tooling (SAST DAST SCA container/IaC/secrets scanning vulnerability management threat modeling API security and secure SDLC).
• Proven ability to drive enterprise-tier security programs: risk-based prioritization remediation SLAs cross-org governance and executive risk communicationnot only feature delivery.
• Strong technical background (Computer Science or related field preferred); credible with security engineers architects and engineering leaders on topics such as authn/authz multi-tenancy cryptography boundaries supply chain and AI/LLM security risks.
• Demonstrated experience shipping developer-facing security products or workflows (CI/CD gates IDE/MR integrations security dashboards or remediation orchestration).
• Excellent communication and stakeholder influence skills across Engineering InfoSec DevOps/Infrastructure Architecture and leadership.
• Proven ability to work independently in ambiguity while building durable process metrics and operating cadence.

Preferred Skills

• Experience building or operating AI-assisted security capabilities (threat modeling automation AI code review exploitability/reachability-informed triage or unified findings platforms).
• Familiarity with MarTech/AdTech or other high-scale multi-tenant platforms handling sensitive customer data.
• Experience with tool evaluation and vendor management for AppSec platforms (e.g. Snyk Wiz Rapid7 or equivalents).

What Were Looking For

• A proactive owner who can run Application Security as a product and a program: curious decisive and ready to tackle complex enterprise risk.
• Someone who thrives in ambiguity takes end-to-end ownership and converts strategy into measurable reduction of platform risk.
• A partner to engineering who values pragmatic risk-based tradeoffs and continuous improvement over checkbox security.
• A leader who can make security scalable through automation clear standards and AI-native workflowswithout becoming a bottleneck.

BENEFITS & PERKS

• Unlimited PTO
• Excellent medical dental and vision coverage
• Employee Equity
• Employee Discounts Virtual Wellness Classes and Pet Insurance And more!!

SALARY RANGE

The salary range for this role is $170000 - $185000 depending on location and experience.

PEOPLE & CULTURE AT ZETA

Zeta considers applicants for employment without regard to and does not discriminate on the basis of an individuals sex race color religion age disability status as a veteran or national or ethnic origin; nor does Zeta discriminate on the basis of sexual orientation gender identity or expression.

Were committed to building a workplace culture of trust and belonging so everyone feels invited to bring their whole selves to work. We provide a forum for employees to celebrate support and advocate for one another. Learn more about our commitment to diversity equity and inclusion here: IN THE NEWS!

Experience:

Senior IC