Director, Application Security

zetaglobal; United States; Remote; USD 155,000 - 210,000; Full time

Benefits offered by this job

Unlimited PTO

Medical, dental, and vision coverage

Employee equity

Virtual wellness classes

Pet insurance

Job summary

zetaglobal is seeking a senior security leader to build and run an AI-native Application Security function for a data-driven marketing technology platform. This player/coach role embeds security into the software development lifecycle, CI/CD pipelines, and AI-powered development workflows, shifting from gate reviews to automated, policy-driven security at enterprise scale.

You will define an AI-native security vision, lead an automation-focused team, evolve threat modeling with continuous

Qualifications

• 5–10+ years in Application Security, DevSecOps, or secure software development.
• Strong knowledge of OWASP, cloud-native architectures, and API security.
• Familiarity with AI/ML security risks and threat landscapes around models and agents.
• Leadership and communication skills with hands-on technical contribution.

Responsibilities

• Define and execute an AI-native Application Security vision, roadmap, and operating model.
• Lead and mentor an application security team focused on automation and modern engineering culture.
• Evolve threat modeling into continuous, system-aware analysis for CI/CD and AI/ML pipelines.
• Run AI-specific adversarial testing covering prompt injection, model abuse, and data leakage.
• Embed security agents into IDEs, PRs, and CI workflows to guide engineers without slowing velocity.
• Translate AI risks into automated guardrails and influence release decisions via continuous risk scoring.

Skills

Application Security

DevSecOps

Cloud security

Threat modeling

CI/CD security

AI/ML security

Tools

CI/CD tooling

Security tooling

Job description

Role overview

A senior security leader is needed to build and run an AI-native Application Security function for a data-driven marketing technology platform. This player/coach role will embed security directly into the software development lifecycle, CI/CD pipelines, and AI-powered development workflows, shifting the practice from a traditional review-and-gate model to a continuous, automated capability driven by policy-as-code, security agents, and real-time risk signals. The position is foundational, shaping how application security operates across conventional codebases and emerging AI/agent systems at enterprise scale.

Responsibilities

• Define and execute an AI-native Application Security vision, roadmap, and operating model, including security copilots and policy-enforcing agents.
• Lead and mentor an application security team that emphasizes automation, leverage, and a modern engineering culture.
• Evolve threat modeling into continuous, system-aware analysis and embed automated security reasoning into CI/CD and AI/ML pipelines.
• Run AI-specific adversarial testing covering prompt injection, model abuse, and data leakage across models, prompts, and agents.
• Embed security agents into IDEs, pull requests, and CI workflows, delivering in-context guidance without slowing engineering velocity.
• Translate emerging AI risks into automated guardrails and influence release decisions through continuous risk scoring.

Requirements

• 5–10+ years of experience in Application Security, DevSecOps, or secure software development.
• Strong working knowledge of OWASP, cloud-native architectures, and API security.
• Familiarity with AI/ML security risks and the threat landscape around models and intelligent agents.
• Demonstrated leadership and communication skills, with the ability to operate as a hands‑on technical contributor.
• Track record of building or scaling application security functions within modern engineering organizations.

Nice to have

• Experience designing agentic security tooling, policy-as-code frameworks, or security copilots.
• Background securing AI systems end-to-end, from training data through inference.

Benefits and work setup

• Remote-friendly posture with salary ranges tied to location and experience.
• Unlimited paid time off, comprehensive medical, dental, and vision coverage, employee equity, and additional perks such as virtual wellness classes and pet insurance.