Senior Security Program Manager — App & Cloud

Chan Zuckerberg; Redwood City (CA); Hybrid; USD 190,000 - 261,800; Full time

Benefits offered by this job

401(k) match with employer

Paid time off to volunteer

Relocation support

Job summary

Chan Zuckerberg Initiative in Redwood City, CA, is seeking a Senior Technical Program Manager for Product Security. This hybrid role focuses on identifying vulnerabilities and building secure frameworks to prevent them, collaborating with engineers and security professionals across Biohub and Learning Commons.

You will shape security architecture, drive end-to-end security programs, and align security practices with business goals.

Qualifications

• 5+ years of technical program management with a security focus.
• Secure SDLC processes and best practices for integrating security.
• Hands-on experience with CI/CD security tooling and automation.
• Familiarity with SAST/DAST and SCA tools.
• Knowledge of zero trust, defense-in-depth, and compliance in regulated industries.

Responsibilities

• Design and improve security tooling, automation, architecture, and frameworks at scale.
• Shift detection and prevention left into the development workflow.
• Provide actionable security guidance to enterprise teams.
• Ensure timely delivery of security projects with milestones.
• Coordinate with vendors and auditors to augment security capabilities.
• Serve as SME on infrastructure and application security.

Skills

Security program management

CI/CD security

Threat modeling

Zero trust

Security automation

DevSecOps

Cloud security

Container security

Architecture governance

Incident response

Tools

Docker

Kubernetes

AWS

Azure

GCP

Job description

Chan Zuckerberg Initiative in Redwood City, CA, is seeking a Senior Technical Program Manager for Product Security. This hybrid role focuses on identifying vulnerabilities and building secure frameworks to prevent them, collaborating with engineers and security professionals across Biohub and Learning Commons.

You will shape security architecture, drive end-to-end security programs, and align security practices with business goals.