Application Security Engineer - Secure AI-Powered DevOps

Zocdoc; New York (NY); On-site; USD 100,000 - 140,000; Full time

Benefits offered by this job

Flexible work environment

Unlimited vacation

100% paid employee health benefits

401(k) with match

Wellness program

Sabbatical after 5 years

Parental leave and fertility support

Cell phone reimbursement

Employee Resource Groups

Great Place to Work Certification

Job summary

Zocdoc is seeking an Application Security Engineer in New York, NY to partner with Compliance, Security, and Engineering to strengthen the secure software development lifecycle and governance across AI initiatives.

You’ll collaborate with engineering teams, translate security requirements into practical guidance, and help shape security guardrails across the business. This role emphasizes proactive risk reduction and secure coding practices.

Qualifications

• Experience in information security, software engineering, or IT audit with an application security focus.
• Understanding of software development processes in agile environments.
• Comfort reading code in Python/JavaScript/Go/Java.
• Exposure to cloud environments (AWS, GCP, Azure) and Git workflows.
• Knowledge of vulnerability categories and web security standards (OWASP Top 10).
• Interest in AI security and automated workflows.
• Ability to integrate generative AI tools into daily workflows to automate tasks.

Responsibilities

• Serve as accessible contact for engineering squads to follow secure SDLC guidelines.
• Review and interpret alerts from SAST/ SCA tools; differentiate true positives from false positives.
• Provide actionable guidance on remediating common application security vulnerabilities (OWASP Top 10).
• Maintain internal security docs, developer playbooks, and secure coding training materials.
• Support governance by tracking security milestones and evidence for audits.
• Monitor vulnerability patch timelines and policy exceptions for leadership reporting.
• Work with GenAI tools and AI governance to ensure privacy and security.

Skills

Application security

Cloud basics

Code review

Python

JavaScript

Go

Java

AI in security

Security certifications

Education

Bachelor's degree in Computer Science or Cybersecurity

Security+ / GSEC / CEH certifications

Tools

AWS

GCP

Azure

Git workflows

Job description

Zocdoc is seeking an Application Security Engineer in New York, NY to partner with Compliance, Security, and Engineering to strengthen the secure software development lifecycle and governance across AI initiatives.

You’ll collaborate with engineering teams, translate security requirements into practical guidance, and help shape security guardrails across the business. This role emphasizes proactive risk reduction and secure coding practices.