<p><strong>WHO WE ARE </strong></p> <p>Zeta Global (NYSE: ZETA) is the AI-Powered Marketing Cloud that leverages advanced artificial intelligence (AI) and trillions of consumer signals to make it easier for marketers to acquire, grow, and retain customers more efficiently. Through the Zeta Marketing Platform (ZMP), our vision is to make sophisticated marketing simple by unifying identity, intelligence, and omnichannel activation into a single platform – powered by one of the industry’s largest proprietary databases and AI. Our enterprise customers across multiple verticals are empowered to personalize experiences with consumers at an individual level across every channel, delivering better results for marketing programs. Zeta was founded in 2007 by David A. Steinberg and John Sculley and is headquartered in New York City with offices around the world. To learn more, go to <a href="https://www.zetaglobal.com">www.zetaglobal.com</a>.</p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 1">About the Role</span></span><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":360,"335559739":80}"> </span></strong></p> <p><span data-contrast="auto">We’re looking for a Director of Application Security to architect and lead an AI-native, agent-driven Application Security function at Zeta.</span> <span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">This is a hands-on, player/coach leadership role focused on shifting security decisively left—embedding security intelligence directly into the software development lifecycle, CI/CD pipelines, and AI-powered development workflows.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">Rather than operating as a traditional gate or review function, Application Security at Zeta is evolving into a continuous, autonomous capability: powered by policy-as-code, security agents, real-time risk signals, and deep integration with how engineers build software.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">Zeta is at the forefront of the AI-native transformation of marketing, having launched Athena by Zeta—a superintelligent, conversational AI agent deeply embedded in the Zeta Marketing Platform. As Zeta accelerates into this AI-driven, agentic future, security is foundational—not optional.</span><span data-ccp-props="{}"> </span></p> <p><strong><span data-contrast="none"><span data-ccp-parastyle="heading 2">KEY RESPONSIBILITIES</span></span><span data-ccp-props="{"134245418":true,"134245529":true,"335559738":160,"335559739":80}"> </span></strong></p> <p><strong><span data-contrast="auto">Leadership & Strategy (AI-Native Player/Coach)</span></strong><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Define and drive an AI-native Application Security vision and roadmap.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Design the operating model for agentic AppSec, including security copilots and policy-enforcing agents.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Act as a hands-on technical leader shaping secure architectures.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Build and mentor a modern Application Security team focused on leverage and automation.</span><span data-ccp-props="{}"> </span></p> <p><span data-ccp-props="{}"> </span></p> <p><strong><span data-contrast="auto">Agentic Threat Modeling & Continuous Validation</span></strong><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Evolve threat modeling into continuous, system-aware analysis.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Embed automated security reasoning into CI/CD and AI/ML pipelines.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Lead AI-specific adversarial testing (prompt injection, model abuse, data leakage).</span><span data-ccp-props="{}"> </span></p> <p><span data-ccp-props="{}"> </span></p> <p><strong><span data-contrast="auto">Shifting Security Left into the SDLC</span></strong><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Embed security agents directly into IDEs, PRs, and CI workflows.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Deliver in-context security guidance without slowing velocity.</span><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Use continuous risk scoring to influence release decisions.</span><span data-ccp-props="{}"> </span></p> <p><span data-ccp-props="{}"> </span></p> <p><strong><span data-contrast="auto">AI & Emerging Threat Defense</span></strong><span data-ccp-props="{}"> </span></p> <p><span data-contrast="auto">- Own AppSec strategy for AI systems, models, prompts, and agents.</span><span data-ccp-pro