RemoteLeaf Logo
Log in Sign up

Lead Application Security Engineer

3 weeks, 4 days ago
United States
Full-time
Lead
Application Security Engineer
Cybersecurity
AWS Azure Burp Suite CI/CD Cybersecurity DevSecOps Django Docker FastAPI GCP JWT Kubernetes Microservices Node.js OAuth OpenID Connect React SonarQube
Apply Now
Zeta Global

Zeta Global

Zeta Global provides an AI-powered marketing cloud that enables enterprises to acquire, grow, and retain customers through precision marketing, leveraging data science, advanced analytics, and machine learning to create optimized customer experiences.

Media
1K-5K
Founded 2007
View All Jobs 21

Description

  • Use AI-assisted threat modeling to identify application, platform, API, cloud, data, and AI/ML security risks early in the development lifecycle.
  • Leverage automated security review tools to assess architecture, design documents, code changes, APIs, and data flows for security gaps.
  • Drive AI-assisted code security reviews using SAST, DAST, SCA, secrets detection, IaC scanning, container scanning, and contextual risk analysis.
  • Evaluate third-party libraries, APIs, vendor integrations, and open-source dependencies for security, compliance, and supply-chain risk.
  • Support AI-enabled red team, blue team, and incident response simulations to validate detection, prevention, and response capabilities.
  • Partner with developers and QA engineers to embed security testing and automated risk detection into CI/CD pipelines.
  • Build and improve security automation that provides real-time feedback during design, coding, testing, release, and deployment.
  • Help design scalable guardrails, reusable security controls, and policy-as-code capabilities across application and platform teams.
  • Monitor evolving threats and evaluate AI-specific risks such as prompt injection, data poisoning, model abuse, model leakage, insecure tool use, and sensitive data exposure.
  • Promote secure coding and secure design practices through reusable playbooks, automated recommendations, and developer-friendly documentation.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
  • 5+ years of experience in Application Security, DevSecOps, Secure Software Development, or Security Engineering.
  • Strong understanding of OWASP Top 10, SANS CWE Top 25, secure design principles, and application threat modeling.
  • Familiarity with AI/ML security concepts such as prompt injection, data poisoning, adversarial testing, model integrity, model abuse, and AI supply-chain risks.
  • Experience building or integrating AI-assisted security workflows, security bots, automated triage systems, or risk scoring models.
  • Experience using AI-assisted or automation-driven approaches to improve security testing, vulnerability analysis, code review, or risk prioritization.
  • Experience with modern application frameworks and architectures such as React, Node.js, Django, FastAPI, or similar technologies.
  • Knowledge of securing APIs, microservices, authentication, and authorization mechanisms such as OAuth2, OIDC, JWT, and service-to-service authentication.
  • Experience with cloud platforms such as AWS, GCP, or Azure, and containerized environments such as Docker and Kubernetes.
  • Working knowledge of security testing and automation tools such as Semgrep, SonarQube, Burp Suite, OWASP ZAP, Trivy, Snyk, GitHub Advanced Security, or similar tools.
  • Ability to analyze security findings, correlate risk context, and drive practical remediation guidance for engineering teams.
  • Strong collaboration and communication skills with the ability to work across Engineering, Product, QA, DevOps, and Security teams.
  • Preferred: Experience with policy-as-code, infrastructure-as-code security, CI/CD security controls, and automated governance.
  • Preferred: Experience with automation frameworks and scripting for security testing, vulnerability validation, and remediation workflows.
  • Preferred: Relevant certifications such as OSCP, GWAPT, CSSLP, cloud security certifications, or AI/ML-specific security certifications.

Benefits

  • Unlimited PTO.
  • Excellent medical, dental, and vision coverage.
  • Employee equity.
  • Employee discounts.
  • Virtual wellness classes.
  • Pet insurance.
  • Salary range of $140,000 to $180,000 depending on location and experience.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Beyond Finance

Staff Application Security Engineer

Beyond Finance 251-1K Banks

Beyond Finance is hiring a Staff Application Security Engineer to own and advance application security across its product and cloud engineering teams.

United States Full-time Lead Application Security Engineer
$160k-$195k
AWS CI/CD CloudFormation Go Python React Native Ruby on Rails Secrets Management Terraform
21 hours, 13 minutes ago
Canopy

Senior Application Security Engineer

Canopy 51-250 Internet Software & Services

Canopy is hiring a Senior Application Security Engineer to help secure its remote Utah-based SaaS platform for accounting firms, with a focus on hardening infrastructure, applications, observability, and the software supply chain.

United States Full-time Senior Application Security Engineer
AWS CI/CD Kubernetes Network Security SIEM WAF
21 hours, 58 minutes ago
Ondo Finance

Senior Security Engineer - Product Security

Ondo Finance 11-50 Diversified Financial Services

Ondo Finance is hiring a Senior Security Engineer for Product Security to secure its tokenized real-world asset platform by partnering with product engineering on threat modeling, secure reviews, and security-by-default delivery.

United States Senior Application Security Engineer
CI/CD Encryption Go JavaScript OAuth OpenID Connect Penetration Testing Python Rust Terraform TypeScript
2 days, 20 hours ago
Counterpart Health

Senior Application Security Engineer

Counterpart Health 51-200 hospital & health care

Counterpart Health is hiring a Senior Application Security Engineer to secure its AI-enabled primary care platform, Counterpart Assistant, by finding and fixing vulnerabilities that affect clinicians during live patient visits.

United States Full-time Senior Application Security Engineer
$135k-$175k
Penetration Testing
2 days, 21 hours ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers