Lead Application Security Engineer

The role

You will lead application and platform security work at Zeta Global. You will embed AI-driven security checks into the software development lifecycle and help engineering teams build secure systems.

What you will do

• Use AI-assisted threat modeling to find application, API, cloud, data and AI/ML security risks early
• Review architecture, design documents, code changes and data flows for security gaps
• Run SAST, DAST, SCA, secrets, IaC and container scanning with contextual risk analysis
• Assess third-party libraries, APIs and vendor integrations for security and supply-chain risk
• Support red team, blue team and incident response simulations
• Embed AI-driven security testing into CI/CD pipelines
• Build security automation that gives developers real-time feedback
• Design guardrails, reusable controls and policy-as-code
• Monitor emerging threats such as prompt injection, data poisoning and model abuse
• Promote secure coding through playbooks, documentation and self-service tools

Required qualifications

• Bachelor's degree in Computer Science, Cybersecurity or a related field, or equivalent practical experience
• 5+ years in Application Security, DevSecOps, Secure Software Development or Security Engineering
• Strong understanding of OWASP Top 10, SANS CWE Top 25, secure design and application threat modeling
• Familiarity with AI/ML security concepts such as prompt injection, data poisoning and model integrity
• Experience building or integrating AI-assisted security workflows, triage systems or risk scoring models
• Experience using AI or automation to improve security testing, code review or risk prioritization
• Experience with modern frameworks such as React, Node.js, Django, FastAPI or similar
• Knowledge of securing APIs, microservices, OAuth2, OIDC, JWT and service-to-service authentication
• Experience with AWS, GCP or Azure, and Docker and Kubernetes
• Working knowledge of tools such as Semgrep, SonarQube, Burp Suite, OWASP ZAP, Trivy, Snyk or GitHub Advanced Security
• Ability to analyze security findings and drive practical remediation guidance
• Strong collaboration and communication skills across Engineering, Product, QA, DevOps and Security

Nice to have

• Experience with policy-as-code, infrastructure-as-code security, CI/CD security controls and automated governance
• Experience with automation frameworks and scripting for security testing and remediation workflows
• Relevant certifications such as OSCP, GWAPT, CSSLP, cloud security or AI/ML security certifications

Benefits

• Unlimited PTO
• Excellent medical, dental and vision coverage
• Employee equity
• Employee discounts
• Virtual wellness classes
• Pet insurance
• And more

Before you apply

• Zeta Global considers applicants without regard to sex, race, color, religion, age, disability, veteran status, national or ethnic origin, sexual orientation or gender identity

About the company

Zeta Global is an AI-powered marketing cloud, headquartered in New York City with offices around the world. It was founded in 2007 by David A. Steinberg and John Sculley.