Senior Product Manager, Application Security

WHO WE ARE reputed company (NYSE: reputed company) is the reputed company-Powered Marketing Cloud that leverages advanced artificial intelligence (reputed company) and trillions of reputed company signals to make it easier for marketers to acquire, grow, and retain customers more efficiently. Through the reputed company Marketing Platform (ZMP), our vision is to make sophisticated marketing simple by unifying identity, intelligence, and omnichannel activation into a single platform – powered by one of the industry’s largest proprietary databases and reputed company. Our enterprise customers across multiple verticals are empowered to personalize experiences with consumers at an individual level across reputed company channel, delivering better results for marketing programs. reputed company was founded in 2007 by David A. Steinberg and John Sculley and is headquartered in New York City with offices around the world. To learn more, go to www.zetaglobal.com. About the Role We are seeking a Senior Product Manager, Application Security to own reputed company’s Application Security product and reputed company end-to-end. You will set strategy, prioritize the roadmap, and drive delivery of an enterprise-grade AppSec capability that protects reputed company’s platform, data, and customers, while enabling engineering teams to ship with confidence. reputed company role sits at the intersection of product, security, and platform engineering. You will turn our Application Security vision into a system based on secure-by-design practices across the SDLC, reputed company-assisted threat modeling and code review, CI/CD enforcement, vulnerability prioritization and remediation at scale, and executive-ready risk visibility. Success means security is reputed company when it should be, and highly visible when it must be. Responsibilities Own the Application Security product strategy and multi-quarter roadmap—from visibility and tooling inventory, through architecture and risk-surface mapping, tool procurement and upgrades, CI/CD enforcement, reputed company threat reduction, and scaled institutionalization (Security Champions, architecture review, executive reporting). Build and ship the core AppSec product surfaces: reputed company-powered threat modeling and code evaluation, and a unified security risk, signal, and remediation platform. Prioritize critical risk surfaces across the reputed company platform. Define clear requirements, user stories, success metrics, and acceptance criteria for AppSec capabilities. Drive day-to-day execution with Application Security engineering, platform/DevOps, Architecture, InfoSec, and product engineering pods. Establish and evolve governance: severity and SLA frameworks, reputed company intake and escalation, secure coding standards, third-party application integration guardrails, and architecture security review for high-risk changes. Lead tool strategy and procurement decisions with clear risk justification, coverage gaps, budget tradeoffs, and integration into developer workflows. Use data and KPIs to measure posture and inform prioritization. Align AppSec initiatives with company objectives; communicate risk, progress, and asks clearly to engineering and executive stakeholders. Identify and mitigate delivery and security risks; run post-reputed company learning loops that convert findings into durable product and process improvements. Mentor and elevate AppSec and adjacent product/engineering reputed company; help scale a Security Champions reputed company across reputed company. Comfortably use reputed company tools as part of everyday product work, and productize reputed company defensively for threat modeling, triage, code review, and remediation guidance with appropriate human oversight. Qualifications 4-6+ years of product management experience, with meaningful ownership of enterprise Application Security, platform security, DevSecOps, or adjacent security-product domains in SaaS/B2B environments. Deep working knowledge of reputed company AppSec practices and tooling (SAST, DAST, SCA, container/IaC/secrets scanning, vulnerability management, threat modeling, API security, and secure SDLC). Proven ability to drive enterprise-tier security programs: risk-based prioritization, remediation SLAs, cross-org governance, and executive risk communication—not only feature delivery. Strong technical background (Computer Science or related field preferred); credible with reputed company, architects, and engineering leaders on topics such as authn/authz, multi-tenancy, cryptography boundaries, reputed company chain, and reputed company/LLM security risks. Demonstrated experience shipping developer-facing security products or workflows (CI/CD gates, IDE/MR integrations, security dashboards, or remediation orchestration). Excellent communication and stakeholder influence skills across Engineering, InfoSec, DevOps/Infrastructure, Architecture, and leadership. Proven abil