Security TPM: Scale Secure DevOps & Applications

Chan Zuckerberg Initiative; Redwood City (CA); Hybrid; USD 190,000 - 261,800; Full time

Benefits offered by this job

401(k) employer match

Paid time off to volunteer

Relocation support

Family-forming benefits

Job summary

Chan Zuckerberg Initiative is seeking a Technical Program Manager specializing in Application Security in Redwood City, CA. You will shape secure foundations for Biohub and Learning Commons, working with engineers, product managers, and security professionals to build shared tools and platforms.

This role emphasizes prevention, secure development, and scalable security controls. You will lead security architecture, governance, and incident response in cloud-native and hybrid environments,

Qualifications

• 5+ years of technical program management or equivalent experience, with a specific focus on security or application security.
• ,
• ],

Responsibilities

• Conceive, design, develop, and improve industry-leading security tooling, automation, architecture, and/or frameworks that enable enterprise teams at scale to deliver applications and services with appropriate security controls to meet evolving requirements for security and privacy
• Identify and eliminate classes of security problems by shifting detection and prevention left into the development workflow
• Provide just-in-time, actionable, technical security guidance to enterprise application and service teams
• Ensure prioritization, resourcing, and timely delivery of work within a changing business environment
• Collaborate with cross-functional teams to ensure security work is being prioritized and addressed
• Drive end-to-end execution of technical security projects, including requirements gathering, scoping, status updates, and delivery milestones.
• Establish and report metrics to track compliance, program health, and ongoing risk posture.
• Coordinate with third-party vendors and auditors to augment internal security capabilities
• Serve as a subject matter expert on infrastructure, architecture, and application security, offering guidance to technical and non-technical stakeholders.
• Support security reviews, threat modeling, and incident response efforts for applications and production infrastructure.

Skills

DevSecOps

SAST/DAST

Threat modeling

CI/CD security

SCA tools

Cloud security (AWS/Azure/GCP)

Docker & Kubernetes security

Architecture risk assessment

Zero trust / defense-in-depth

Tools

CI/CD tooling

Threat modeling tooling

SAST/DAST tools

IaC security tooling

Job description

Chan Zuckerberg Initiative is seeking a Technical Program Manager specializing in Application Security in Redwood City, CA. You will shape secure foundations for Biohub and Learning Commons, working with engineers, product managers, and security professionals to build shared tools and platforms.

This role emphasizes prevention, secure development, and scalable security controls. You will lead security architecture, governance, and incident response in cloud-native and hybrid environments,