Director, AI & App Security (Hybrid Dallas)

Lantern; Dallas (TX); Hybrid; USD 180,000 - 280,000; Full time

Benefits offered by this job

Medical Insurance

Vision Insurance

Short & Long Term Disability

Life Insurance

401k with company match

Flexible Time Off

Job summary

Lantern is seeking a Director, Application & AI Security to own end‑to‑end security for our platform and AI initiatives. You will define secure design standards, build and lead a growing security team, and partner with engineering to ship fast while protecting PHI and model data.

You will drive DevSecOps, threat modeling, and cryptographic governance across SAST/DAST/IAST, SBOM practices, and third‑party model risk, with a focus on pragmatic guardrails and fast, automated safety.

Qualifications

• Minimum 8 years in application or product security with leadership experience.
• Proven ownership of AI and ML security at production scale.
• Experience delivering secure SDLC and governance across pipelines.

Responsibilities

• Own application, API, and dependency security across the lifecycle.
• Lead security architecture, threat modeling, and cryptographic standards.
• Oversee DevSecOps, pipeline security, SBOM, and risk‑based release gating.
• Build and scale a security team aligned with engineering partners.
• Serve as the front door for security reviews with fast, risk‑based triage.

Skills

Application security

Leadership

AI security

Threat modeling

DevSecOps

Cryptographic standards

Security architecture

Secure SDLC

Regulated data security

OWASP LLM Top 10

Education

Bachelor’s degree or equivalent experience

Tools

Snyk

GitHub Advanced Security

AI security posture management

Garak / PyRIT / Promptfoo

Job description

Lantern is seeking a Director, Application & AI Security to own end‑to‑end security for our platform and AI initiatives. You will define secure design standards, build and lead a growing security team, and partner with engineering to ship fast while protecting PHI and model data.

You will drive DevSecOps, threat modeling, and cryptographic governance across SAST/DAST/IAST, SBOM practices, and third‑party model risk, with a focus on pragmatic guardrails and fast, automated safety.