Lead AI-Driven AppSec Engineer

Zeta Global; United States; Remote; USD 140,000 - 180,000; Full time

Benefits offered by this job

Unlimited PTO

Excellent medical, dental, and vision

Employee Equity

Employee Discounts

Job summary

Zeta Global seeks a Lead Application Security Engineer to advance the company’s application and platform security posture through AI-native security practices and automated controls. You will help embed security across the SDLC and collaborate with Engineering, Product, QA, DevOps, and AI platform teams to identify risks and build secure-by-default patterns.

The role offers cross-functional visibility, exposure to threat modeling, automated validation, and proactive defense to continuously

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field or equivalent experience.
• 5+ years in Application Security, DevSecOps, or Secure Engineering.
• Strong knowledge of OWASP Top 10 and threat modeling.

Responsibilities

• Perform AI-driven threat modeling and security validation across architecture, API, data flows, and cloud.
• Embed AI-native security testing into CI/CD pipelines and automate risk detection.
• Lead proactive defense, vulnerability management, and incident response simulations.
• Collaborate with Engineering, Product, QA, DevOps, and AI teams on secure design patterns.
• Promote secure coding through guidance, playbooks, and developer enablement.

Skills

Application Security

DevSecOps

Secure SDLC

AI/ML security

Cloud security

CI/CD security

OWASP

Security automation

Education

Bachelor's degree

Tools

Semgrep

SonarQube

Burp Suite

OWASP ZAP

Trivy

Snyk

GitHub Advanced Security

Job description

Zeta Global seeks a Lead Application Security Engineer to advance the company’s application and platform security posture through AI-native security practices and automated controls. You will help embed security across the SDLC and collaborate with Engineering, Product, QA, DevOps, and AI platform teams to identify risks and build secure-by-default patterns.

The role offers cross-functional visibility, exposure to threat modeling, automated validation, and proactive defense to continuously