AI-Powered AppSec Director: Architect Secure SDLC

Zeta Global Corp.; San Francisco, Northern (CA, KY); Hybrid; USD 180,000 - 210,000; Full time

Benefits offered by this job

Unlimited PTO

Excellent medical, dental, and vision

Employee Equity

Employee Discounts

Virtual Wellness Classes

Pet Insurance

Job summary

Zeta Global is seeking a Director of Application Security to architect and lead an AI-native, agent-driven AppSec function. This role focuses on embedding security intelligence into the SDLC, CI/CD pipelines, and AI-powered development workflows, shifting security left across engineering processes.

The position requires building a modern AppSec team, defining policy-as-code, and integrating security copilots and agents for continuous risk management and secure AI systems.

Qualifications

• 5–10+ years in AppSec, DevSecOps, or secure software development.
• Strong knowledge of OWASP, cloud-native systems, and API security.
• Familiarity with AI/ML security risks.
• Excellent communication and leadership skills.

Responsibilities

• Define and drive an AI-native AppSec vision and roadmap.
• Design the operating model for agentic AppSec and policy-enforcing agents.
• Act as a hands-on technical leader shaping secure architectures.
• Build and mentor a modern AppSec team focused on leverage and automation.
• Embed automated security reasoning into CI/CD and AI/ML pipelines.
• Lead AI-specific adversarial testing (prompt injection, data leakage).
• Embed security agents into IDEs, PRs, and CI workflows.
• Deliver in-context security guidance without slowing velocity.
• Own AppSec strategy for AI systems, models, prompts, and agents.

Skills

AppSec

DevSecOps

Cloud security

API security

Leadership

OWASP

Job description

Zeta Global is seeking a Director of Application Security to architect and lead an AI-native, agent-driven AppSec function. This role focuses on embedding security intelligence into the SDLC, CI/CD pipelines, and AI-powered development workflows, shifting security left across engineering processes.

The position requires building a modern AppSec team, defining policy-as-code, and integrating security copilots and agents for continuous risk management and secure AI systems.