Senior Application Security Engineer

Were seeking a Senior Application Security Engineer to help strengthen Zetas application and platform security posture. Youll play a critical role in embedding security throughout the software development lifecycle, ensuring our systems, applications, and AI-driven platforms are built securely from the ground up.

Zeta operates at massive scale, powering billions of consumer profiles and petabytes of data across real-time, AI-powered marketing platforms. In this role, youll collaborate with engineering and product teams to identify risks, implement secure design principles, and build automated controls that enable secure innovation.

This position offers significant technical scope, cross-functional visibility, and opportunities to contribute directly to the companys overall security maturity.

Key Responsibilities:

Threat Modeling & Security Validation

• Conduct threat modeling and security reviews for distributed cloud-native systems.
• Perform security code reviews, static/dynamic analysis (SAST/DAST), and dependency scanning.
• Participate in incident response exercises and red/blue team simulations.
• Assess third-party libraries, APIs, and vendor integrations for security compliance.

Embedding Security into the SDLC

• Partner with developers and QA engineers to embed security testing into CI/CD pipelines.
• Review architecture and design documents to identify and mitigate risks early.
• Contribute to security automation initiatives and tooling to improve developer velocity.
• Support security checkpoints in release and deployment processes.

Emerging Threat Monitoring & Proactive Defense

• Stay current on evolving security risks, frameworks, and attack vectors, including AI/ML-specific threats (e.g., prompt injection, model poisoning).
• Assist in designing and deploying proactive defense mechanisms across applications and data platforms.
• Support investigations and post-incident reviews to strengthen detection and prevention capabilities.

Security Awareness & Policy Implementation

• Advocate secure coding and best practices through code reviews, workshops, and documentation.
• Contribute to internal security standards and playbooks.
• Collaborate closely with Engineering, DevOps, and Product teams to foster a security-first culture.

What You Need to Succeed

• Bachelors degree in computer science, Cybersecurity, or related field, or equivalent experience.
• 2 - 4 years of experience in Application Security, DevSecOps, or Secure Software Development.
• Strong understanding of OWASP Top 10, SANS CWE Top 25, and general application threat modeling.
• Experience with frameworks and architectures such as React, Node.js, Django, or FastAPI.
• Knowledge of securing APIs, microservices, and authentication mechanisms (OAuth2, OIDC, JWT).
• Experience with cloud platforms (AWS, GCP, Azure) and containerization (Docker, Kubernetes).
• Working knowledge of security testing tools (e.g., Semgrep, SonarQube, Burp Suite, Zap, Trivy).
• Solid collaboration and communication skills with cross-functional teams.

Nice to Have

• Familiarity with AI/ML security concepts such as data poisoning, adversarial testing, and model integrity.
• Experience with automation frameworks and scripting for security testing.
• Relevant certifications (e.g., OSCP, GWAPT, CSSLP, or ML/AI-specific security certifications)