Lead Application Security Engineer

Strengthens application and platform security at Zeta Global, whose AI marketing platform handles billions of consumer profiles, by building automated, AI-assisted security into the development lifecycle. The engineer applies AI-assisted threat modelling and review tooling to designs, code, APIs and data flows, runs SAST, DAST, SCA, secrets, IaC and container scanning in CI/CD, assesses third-party and open-source risk, evaluates AI-specific threats such as prompt injection and model abuse, builds policy-as-code guardrails and self-service security, and supports red, blue and incident simulations. Zeta wants five or more years in application security, DevSecOps or security engineering, OWASP and CWE knowledge, experience with AI-assisted security automation, and API, OAuth2/OIDC, cloud and container security skills. Based in San Francisco.