Senior Application Security Engineer

We’re seeking a Senior Application Security Engineer to help strengthen Zeta’s application and platform security posture. You’ll play a critical role in embedding security throughout the software development lifecycle, ensuring our systems, applications, and AI-driven platforms are built securely from the ground up. Zeta operates at massive scale, powering billions of consumer profiles and petabytes of data across real-time, AI-powered marketing platforms. In this role, you’ll collaborate with engineering and product teams to identify risks, implement secure design principles, and build automated controls that enable secure innovation. This position offers significant technical scope, cross-functional visibility, and opportunities to contribute directly to the company’s overall security maturity. Key Responsibilities: Threat Modeling & Security Validation Conduct threat modeling and security reviews for distributed cloud-native systems. Perform security code reviews, static/dynamic analysis (SAST/DAST), and dependency scanning. Participate in incident response exercises and red/blue team simulations. Assess third-party libraries, APIs, and vendor integrations for security compliance. Embedding Security into the SDLC Partner with developers and QA engineers to embed security testing into CI/CD pipelines. Review architecture and design documents to identify and mitigate risks early. Contribute to security automation initiatives and tooling to improve developer velocity. Support security checkpoints in release and deployment processes. Emerging Threat Monitoring & Proactive Defense Stay current on evolving security risks, frameworks, and attack vectors, including AI/ML-specific threats (e.g., prompt injection, model poisoning). Assist in designing and deploying proactive defense mechanisms across applications and data platforms. Support investigations and post-incident reviews to strengthen detection and prevention capabilities. Security Awareness & Policy Implementation Advocate secure coding and best practices through code reviews, workshops, and documentation. Contribute to internal security standards and playbooks. Collaborate closely with Engineering, DevOps, and Product teams to foster a security-first culture. What You Need to Succeed Bachelor’s degree in computer science, Cybersecurity, or related field, or equivalent experience. 2 - 4 years of experience in Application Security, DevSecOps, or Secure Software Development.