Lead AppSec Engineer - AI-Driven Security & SDLC

Zeta Global; New York (NY); On-site; USD 220,000 - 250,000; Full time

Benefits offered by this job

Unlimited PTO

Excellent medical, dental and vision

Employee Equity

Employee Discounts, Virtual Wellness,?

Job summary

Zeta Global is seeking a Lead Application Security Engineer to advance our AI-powered security posture across the software lifecycle. You will partner with Engineering, Product, QA, DevOps, and AI teams to embed secure-by-default patterns and automated controls.

With scalable threat modeling, automated validation, and proactive defense, you’ll influence security maturity at speed while protecting trillions of consumer signals across our platforms.

Qualifications

• Bachelor’s degree in Computer Science, Cybersecurity, or related field.
• 5+ years of experience in Application Security, DevSecOps, or security engineering.
• Strong knowledge of OWASP Top 10 and secure design principles.
• Experience with AI/ML security concepts (prompt injection, data poisoning, etc.) is a plus.
• Experience building AI-enabled security workflows and risk scoring models.

Responsibilities

• AI-driven threat modeling to identify risks early in design and development.
• Use automated tools to evaluate architecture, design docs, code, APIs, and data flows.
• Lead AI-assisted code security reviews (SAST, DAST, SCA, secrets detection, IaC, containers).
• Embed security testing and risk detection into CI/CD pipelines.
• Support proactive defense across applications, APIs, and data platforms.

Skills

Application Security

DevSecOps

Cloud security

Threat modeling

Secure coding

SAST/DAST/IAST

CI/CD security

Security automation

Collaboration

Communication

Education

Bachelor's degree

Tools

Semgrep

SonarQube

Burp Suite

OWASP ZAP

Trivy

Snyk

GitHub Advanced Security

Job description

Zeta Global is seeking a Lead Application Security Engineer to advance our AI-powered security posture across the software lifecycle. You will partner with Engineering, Product, QA, DevOps, and AI teams to embed secure-by-default patterns and automated controls.

With scalable threat modeling, automated validation, and proactive defense, you’ll influence security maturity at speed while protecting trillions of consumer signals across our platforms.