Impress employers and recruiters.
Choose from hundreds of resume examples.
Impress employers and recruiters.
Choose from hundreds of resume examples.
Target Resume Now
Tailor your resume to this Director, Application & AI Security role.
Rezi rewrites your resume against Lantern's job description. Free.
Tailor your resume to this Director, Application & AI Security role.
Rezi rewrites your resume against Lantern's job description. Free.
Don't guess if your resume is good enough.
See how it scores against the Director, Application & AI Security posting at Lantern — free, in seconds.
Don't guess if your resume is good enough.
See how it scores against the Director, Application & AI Security posting at Lantern — free, in seconds.
About the Role
The Director, Application & AI Security owns application and AI security end to end, ensuring the security of software and AI systems. This role is crucial for the company's AI strategy, enabling rapid product development and AI adoption while protecting sensitive data.
Responsibilities
- Own application security across the development lifecycle, including SAST/DAST/SCA/IAST, code and dependency security, API security, and runtime protections.
- Own AI and ML security, covering model and agent security, prompt-injection and tool-use risk, and data-egress controls for third-party model providers.
- Own security architecture and threat modeling, including secure-by-design review and cryptographic standards.
- Own DevSecOps and pipeline security, with scanning as a default in CI/CD and MLOps/LLMOps pipelines, and software supply chain and SBOM practice.
- Own the security-review intake as a single front door with risk-based triage.
- Own the application and AI security tool stack and the secure-design standards behind it.
- Deliver an AI golden path with an approved-model catalog and automated data-egress controls.
- Establish a secure SDLC paved road with scanning in the pipeline by default and critical findings resolved within SLA.
- Implement a single security-review intake that delivers fast, risk-based answers.
- Build out the security team by filling open roles.
Requirements
- A minimum of 8 years in application or product security.
- A minimum of 3 years leading a team with function-level accountability.
- Demonstrated AI and ML security ownership at production scale, including model and agent security, prompt-injection and tool-use risk, and data-egress control for third-party model providers.
- Working fluency in OWASP LLM Top 10, MITRE ATLAS, and AI risk-management standards (NIST AI RMF, ISO/IEC 42001).
- Secure SDLC leadership across SAST/DAST/SCA/IAST, dependency and software supply-chain risk, SBOM practice, and remediation delivered through engineering teams.
- Security architecture and threat-modeling depth.
- DevSecOps and pipeline security experience, including scanning as a default in CI/CD and risk-calibrated release gating.
- API security experience on a platform handling regulated data.
- A track record of delivering security as paved roads and secure defaults rather than review gates.
- Bachelor’s degree in a relevant field, or equivalent professional experience.
Skills
- SAST
- DAST
- SCA
- IAST
- API security
- WAF
- API gateways
- AI security
- ML security
- Model security
- Agent security
- Prompt-injection risk
- Tool-use risk
- Data-egress controls
- OWASP LLM Top 10
- MITRE ATLAS
- NIST AI RMF
- ISO/IEC 42001
- Security architecture
- Threat modeling
- Cryptographic standards
- DevSecOps
- Pipeline security
- CI/CD
- MLOps
- LLMOps
- Software supply chain
- SBOM
- Risk-based triage
- Snyk
- GitHub Advanced Security
- Wiz
- Garak
- PyRIT
- Promptfoo
- Customer-managed key models
Location
- NYC, NY
Work Type
- Hybrid
Experience Level
- 8+ years application or product security
- 3+ years leading a team
Education Level
- Bachelor’s degree in a relevant field, or equivalent professional experience.
Salary/Compensations
- $200,000 - $275,000 annually
- Eligible for an annual bonus
Benefits
- Medical Insurance
- Dental Insurance
- Vision Insurance
- Short & Long Term Disability
- Life Insurance
- 401k with company match
- Flexible Time Off
- Paid Parental Leave
About the Company
- Lantern is the specialty care platform connecting people with the best care when they need it most.
- Lantern curates a Network of Excellence comprised of the nation's top specialists for surgery, cancer care, infusions and more.
- Lantern delivers excellent care with significant cost savings to employers and their workforces.
- Lantern pairs members with a dedicated care team, including Care Advocates and nurses, for the entirety of their care journey.
- Lantern provides convenient access to specialists nationwide.
- Lantern is trusted by the nation's largest employers to deliver care to more than 6 million members across the country.
- Lantern operates in a regulated healthcare environment (HIPAA, HITRUST, SOC 2).
- Lantern handles protected health information at scale.
- Lantern is becoming an AI healthcare company, with AI adoption a top company priority.
Equal Opportunity
- Lantern does not discriminate on the basis of race, sex, color, religion, age, national origin, marital status, disability, veteran status, genetic information, sexual orientation, gender identity or any other reason prohibited by law in provision of employment opportunities and benefits.