RemoteLeaf Logo
Log in Sign up

Lead Application Security Engineer

21 hours, 55 minutes ago
United States
Full-time
Lead
Application Security Engineer
Cybersecurity
AWS Azure Burp Suite CI/CD Cybersecurity DevSecOps Django Docker FastAPI GCP JWT Kubernetes Microservices Node.js OAuth OpenID Connect React SonarQube
Apply Now
Zeta Global

Zeta Global

Zeta Global provides an AI-powered marketing cloud that enables enterprises to acquire, grow, and retain customers through precision marketing, leveraging data science, advanced analytics, and machine learning to create optimized customer experiences.

Media
1K-5K
Founded 2007
View All Jobs 51

Description

  • Use AI-assisted threat modeling to identify application, platform, API, cloud, data, and AI/ML security risks early in the development lifecycle.
  • Leverage automated security review tools to assess architecture, design documents, code changes, APIs, and data flows for security gaps.
  • Drive AI-assisted code security reviews using SAST, DAST, SCA, secrets detection, IaC scanning, container scanning, and contextual risk analysis.
  • Evaluate third-party libraries, APIs, vendor integrations, and open-source dependencies for security, compliance, and supply-chain risk.
  • Support AI-enabled red team, blue team, and incident response simulations to validate detection, prevention, and response capabilities.
  • Partner with developers and QA engineers to embed security testing and automated risk detection into CI/CD pipelines.
  • Build and improve security automation that provides real-time feedback during design, coding, testing, release, and deployment.
  • Help design scalable guardrails, reusable security controls, and policy-as-code capabilities across application and platform teams.
  • Monitor evolving threats and evaluate AI-specific risks such as prompt injection, data poisoning, model abuse, model leakage, insecure tool use, and sensitive data exposure.
  • Promote secure coding and secure design practices through reusable playbooks, automated recommendations, and developer-friendly documentation.

Requirements

  • Bachelor’s degree in Computer Science, Cybersecurity, or a related field, or equivalent practical experience.
  • 5+ years of experience in Application Security, DevSecOps, Secure Software Development, or Security Engineering.
  • Strong understanding of OWASP Top 10, SANS CWE Top 25, secure design principles, and application threat modeling.
  • Familiarity with AI/ML security concepts such as prompt injection, data poisoning, adversarial testing, model integrity, model abuse, and AI supply-chain risks.
  • Experience building or integrating AI-assisted security workflows, security bots, automated triage systems, or risk scoring models.
  • Experience using AI-assisted or automation-driven approaches to improve security testing, vulnerability analysis, code review, or risk prioritization.
  • Experience with modern application frameworks and architectures such as React, Node.js, Django, FastAPI, or similar technologies.
  • Knowledge of securing APIs, microservices, authentication, and authorization mechanisms such as OAuth2, OIDC, JWT, and service-to-service authentication.
  • Experience with cloud platforms such as AWS, GCP, or Azure, and containerized environments such as Docker and Kubernetes.
  • Working knowledge of security testing and automation tools such as Semgrep, SonarQube, Burp Suite, OWASP ZAP, Trivy, Snyk, GitHub Advanced Security, or similar tools.
  • Ability to analyze security findings, correlate risk context, and drive practical remediation guidance for engineering teams.
  • Strong collaboration and communication skills with the ability to work across Engineering, Product, QA, DevOps, and Security teams.
  • Preferred: Experience with policy-as-code, infrastructure-as-code security, CI/CD security controls, and automated governance.
  • Preferred: Experience with automation frameworks and scripting for security testing, vulnerability validation, and remediation workflows.
  • Preferred: Relevant certifications such as OSCP, GWAPT, CSSLP, cloud security certifications, or AI/ML-specific security certifications.

Benefits

  • Unlimited PTO.
  • Excellent medical, dental, and vision coverage.
  • Employee equity.
  • Employee discounts.
  • Virtual wellness classes.
  • Pet insurance.
  • Salary range of $140,000 to $180,000 depending on location and experience.

Interested in this position?

Apply directly on the company website

Apply Now

Similar Roles

Anaplan

Principal Security Architect (Product Security)

Anaplan 1K-5K Internet Software & Services

Anaplan is hiring a Senior Security Architecture IC to define and drive secure-by-design architecture across its enterprise planning platform and AI products.

United Kingdom Lead Application Security Engineer
Encryption Machine Learning OWASP
3 days, 22 hours ago
Anaplan

Principal Security Architect (Product Security)

Anaplan 1K-5K Internet Software & Services

Anaplan is hiring a Senior Security Architect to define and drive secure architecture across its enterprise planning platform, including legacy and AI-enabled products.

United Kingdom Lead Application Security Engineer
Encryption LLM Machine Learning OWASP
3 days, 22 hours ago
Binance

Senior Application Security Architect

Binance 5K-10K Capital Markets

Binance is seeking an Application Security professional to help secure its global blockchain and cryptocurrency products by designing protections, reviewing risks, and guiding secure development practices.

Asia Taiwan Full-time Senior Application Security Engineer
Java OWASP Penetration Testing
6 days, 22 hours ago
ClearCapital.com,

Senior Application Security Engineer

ClearCapital.com, 1-10 Real Estate

Clear Capital is hiring a Senior Application Security Engineer to secure application services and related dependencies across the software lifecycle, with a strong focus on risk mitigation, secure development, and AI and third-party software security.

United States Full-time Mid Level Application Security Engineer
$111k-$144k
AWS C++ Java JavaScript Penetration Testing PHP PowerShell Python Ruby
1 week, 3 days ago

You're on a roll! Sign up now to keep applying.

Sign Up

Already have an account? Log in

Used by 14,729+ remote workers