Application Security Architect

WHO WE ARE 

Zeta Global (NYSE: ZETA) is the AI-Powered Marketing Cloud that leverages advanced artificial intelligence (AI) and trillions of consumer signals to make it easier for marketers to acquire, grow, and retain customers more efficiently. Through the Zeta Marketing Platform (ZMP), our vision is to make sophisticated marketing simple by unifying identity, intelligence, and omnichannel activation into a single platform – powered by one of the industry’s largest proprietary databases and AI. Our enterprise customers across multiple verticals are empowered to personalize experiences with consumers at an individual level across every channel, delivering better results for marketing programs. Zeta was founded in 2007 by David A. Steinberg and John Sculley and is headquartered in New York City with offices around the world. To learn more, go to www.zetaglobal.com.

THE ROLE

We are looking for a forward-thinking Application Security Architect to lead the security of our next generation AI-driven marketing platform, predictive analytics system, and high-scale customer engagement tools. This role involves integrating security into every phase of our software development lifecycle (SDLC), especially in a fast-paced DevOps and MLOps environment.

You’ll be an enabler, not a gatekeeper, working alongside Software Engineers, Data Scientists, and AI researchers to ensure code security, protect APIs, and enforce best practices for securing AI models and data applications.

RESPONSIBILITIES

• Lead threat modeling and security architecture reviews for distributed, event-driven, and cloud-native architectures
• Perform secure code reviews across modern languages and frameworks (Python, TypeScript, React, Node.js, and other modern stacks).
• Integrate cutting-edge SAST/DAST, Software Composition Analysis (SCA), and container scanning tools into automated SDLC and MLOps pipelines.
• Secure model inference endpoints, feature stores, and data ingestion pipelines from poisoning, evasion, and data leakage attacks.
• Collaborate with AI engineers, software developers, and product teams to build secure features without slowing down innovation.
• Drive incident response simulations for AI-related vulnerabilities and orchestrate real-world red/blue team exercises.
• Evangelize secure coding and AI security through internal training, hands-on workshops, and brown bag sessions.
• Stay current with OWASP, monitor emerging threats (e.g., LLM jailbreaks, data poisoning, prompt injection) and recommend proactive controls.

REQUIRMENTS

• Bachelor's degree in Computer Science, Cybersecurity, or a related field.
• 2–5+ years of experience in AppSec, DevSecOps, or secure software development.
• Strong grasp of OWASP Top 10, SANS CWE Top 25, MITRE ATT&CK for ML, and adversarial attack patterns.
• Experience securing modern web and backend stacks (e.g., React, Node.js, Django, FastAPI, etc.).
• Familiarity with AI/ML security concepts such as model inversion, adversarial examples, and data integrity in training pipelines.
• Strong grasp of OAuth2, OpenID Connect, JWT, and best practices for API and microservice security.
• Experience working with or securing cloud-native platforms (AWS/GCP/Azure), containerized apps (Docker, Kubernetes).
• Tools you may have used: Veracode, Checkmarx, SonarQube, Burp Suite, Zap, Trivy, Semgrep, or LangSec tools.
• Certifications like OSCP, CSSLP, GWAPT, or ML-Sec-related certs (e.g., MITRE ATT&CK Defender for ML) are a strong plus.

BENEFITS & PERKS

• Unlimited PTO
• Excellent medical, dental, and vision coverage
• Employee Equity
• Employee Discounts, Virtual Wellness Classes, and Pet Insurance And more!!

SALARY RANGE

The salary range for this role is $120,000 - $150,000, depending on location and experience. 

PEOPLE & CULTURE AT ZETA

Zeta considers applicants for employment without regard to, and does not discriminate on the basis of an individual’s sex, race, color, religion, age, disability, status as a veteran, or national or ethnic origin; nor does Zeta discriminate on the basis of sexual orientation, gender identity or expression.  

We’re committed to building a workplace culture of trust and belonging, so everyone feels invited to bring their whole selves to work. We provide a forum for employees to celebrate, support and advocate for one another. Learn more about our commitment to diversity, equity and inclusion here:  https://zetaglobal.com/blog/a-look-into-zetas-ergs/ 

ZETA IN THE NEWS!

https://zetaglobal.com/press/?cat=press-releases 

#LI-ND1