Lead Application Security Engineer

🕒 July 15

🇺🇸 United States – Remote

💵 $140k - $180k / year

⏰ Full Time

🟠 Senior

💻 Application Engineer

🦅 H1B Visa Sponsor

This company has sponsored H1B visas in the past.

👻 Ghost score 2%

What it means: how likely this posting is sitting open without active hiring.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

Set Up Email Alert For New Jobs

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume

Zeta Global

WebsiteLinkedInAll Job Openings

1001 - 5000 employees

Founded 2007

💼 Consulting

📦 Logistics

✈️ Travel

💰 Post-IPO Debt on 2024-09

Consulting • Logistics • Travel

Zeta Global is an AI-powered marketing cloud that leverages proprietary AI and trillions of consumer signals to acquire, grow, and retain customers more efficiently. The Zeta Marketing Platform (ZMP) offers a comprehensive suite of tools, including data management, customer data platforms (CDP), email service providers (ESP), and digital signal processing (DSP), to create individualized customer experiences and improve marketing outcomes. Zeta emphasizes omnichannel marketing, customer intelligence, and data-driven marketing strategies, partnering with brands, agencies, and publishers worldwide to accelerate brand growth and engagement. Their platform is designed to tackle complex marketing challenges with solutions for customer acquisition, growth, and retention through predictive AI and actionable consumer data.

📋 Description

• Use AI-assisted threat modeling capabilities to identify application, platform, API, cloud, data, and AI/ML security risks early in the design and development process. • Leverage automated security review tools to evaluate architecture, design documents, code changes, APIs, and data flows for security gaps and control weaknesses. • Drive AI-assisted code security reviews using SAST, DAST, SCA, secrets detection, IaC scanning, container scanning, and contextual risk analysis. • Use automation and intelligent correlation to assess third-party libraries, APIs, vendor integrations, and open-source dependencies for security, compliance, and supply-chain risk. • Support AI-enabled red team, blue team, and incident response simulations to validate detection, prevention, and response capabilities. • Partner with developers and QA engineers to embed AI-driven security testing and automated risk detection into CI/CD pipelines. • Build and improve security automation that provides real-time feedback to developers during design, coding, testing, release, and deployment. • Use AI-assisted analysis to review architecture and design artifacts, identify risks earlier, and recommend secure implementation patterns. • Contribute to intelligent security checkpoints that reduce manual review effort while improving consistency, traceability, and developer velocity. • Help design scalable guardrails, reusable security controls, and policy-as-code capabilities across application and platform teams. • Monitor evolving application, cloud, API, AI/ML, and data security risks using AI-assisted threat intelligence, vulnerability intelligence, and attack-pattern analysis. • Identify and evaluate AI-specific threats such as prompt injection, data poisoning, model abuse, model leakage, insecure tool use, and sensitive data exposure. • Assist in designing and deploying proactive defense mechanisms across applications, APIs, data platforms, and AI-powered systems. • Use automated signals, telemetry, and risk scoring to support investigations, post-incident analysis, and continuous improvement of prevention and detection capabilities. • Translate recurring vulnerabilities and incidents into feedback loops that improve threat models, secure design patterns, and SDLC controls. • Promote secure coding and secure design practices through AI-assisted guidance, reusable playbooks, automated recommendations, and developer-friendly documentation. • Contribute to internal security standards, secure engineering patterns, and AI-native security playbooks. • Help teams adopt security self-service capabilities that reduce dependency on manual AppSec review. • Collaborate closely with Engineering, DevOps, QA, Product, and AI platform teams to foster a security-first and automation-first culture. • Use metrics and insights to measure control effectiveness, remediation trends, developer adoption, and overall security maturity.

🎯 Requirements

• Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience. • 5+ years of experience in Application Security, DevSecOps, Secure Software Development, or Security Engineering. • Strong understanding of OWASP Top 10, SANS CWE Top 25, secure design principles, and application threat modeling. • Familiarity with AI/ML security concepts such as prompt injection, data poisoning, adversarial testing, model integrity, model abuse, and AI supply-chain risks. • Experience building or integrating AI-assisted security workflows, security bots, automated triage systems, or risk scoring models. • Experience using AI-assisted or automation-driven approaches to improve security testing, vulnerability analysis, code review, or risk prioritization. • Experience with modern application frameworks and architectures such as React, Node.js, Django, FastAPI, or similar technologies. • Knowledge of securing APIs, microservices, authentication, and authorization mechanisms such as OAuth2, OIDC, JWT, and service-to-service authentication. • Experience with cloud platforms such as AWS, GCP, or Azure, and containerized environments such as Docker and Kubernetes. • Working knowledge of security testing and automation tools such as Semgrep, SonarQube, Burp Suite, OWASP ZAP, Trivy, Snyk, GitHub Advanced Security, or similar tools. • Ability to analyze security findings, correlate risk context, and drive practical remediation guidance for engineering teams. • Strong collaboration and communication skills with the ability to work across Engineering, Product, QA, DevOps, and Security teams.

🏖️ Benefits

• Unlimited PTO • Excellent medical, dental, and vision coverage • Employee Equity • Employee Discounts, Virtual Wellness Classes, and Pet Insurance And more!!