Principal Infrastructure Security Engineer

zetaglobal; United States; Remote; USD 220,000 - 240,000; Full time

Benefits offered by this job

Flexible paid time off

Medical, dental, and vision coverage

Equity

Wellness classes

Pet insurance

Job summary

zetaglobal is seeking a principal-level security leader to set the direction for infrastructure security while remaining hands-on in implementation, primarily in an AWS-based environment. You will partner with application and information security teams to prevent problems and respond effectively when incidents occur.

In this player-coach role, you will build a risk-based DevSecOps roadmap, drive AWS security controls, enforce least privilege, and integrate security into IaC, CI/CD, and the

Qualifications

• 10+ years of combined software, platform/DevOps, and security engineering experience, including three or more years as a technical lead.
• Ability to lead cross-functional security or infrastructure initiatives and influence engineering and security teams.
• Hands-on AWS security and IAM experience, including least privilege, privileged access, encryption, and network boundaries.
• Experience automating security controls through scripting, infrastructure as code, CI/CD, and policy as code.
• Experience securing delivery pipelines across code, infrastructure, containers, dependencies, artifacts, and secrets.
• Nice to have experience building a security or DevSecOps practice and managing engineers.
• Kubernetes and container security, secure software development, supply chain security, or security monitoring experience.
• Experience selecting tools, managing vendors or budgets, and measuring security outcomes.
• Familiarity with audit frameworks such as SOX, SOC 2, or ISO 27001.

Responsibilities

• Build and execute a risk-based DevSecOps roadmap, with clear ownership, metrics, escalation paths, and plans for team growth.
• Implement AWS safeguards for identity and access, networking, encryption, secrets, and cloud configuration; ensure useful security activity is logged.
• Integrate security controls into infrastructure as code, CI/CD, containers, and software supply chains, including scanning and policy automation.
• Coordinate with application and information security on testing, policy, audit evidence, and incident response.
• Prioritize vulnerabilities by exposure, exploitability, and business impact; drive remediation and manage exceptions.
• Investigate incidents, support containment and recovery, and turn lessons learned into improvements.
• Nice-to-have: Experience building a security or DevSecOps practice and managing engineers.
• Nice-to-have: Kubernetes and container security, secure software development, supply chain security, or security monitoring.

Skills

Security leadership

DevSecOps

AWS IAM security

CI/CD security

Vulnerability management

Incident response

Cross-functional collaboration

Job description

Set the direction for infrastructure security while remaining closely involved in implementation. This principal-level, player-coach role strengthens security across a primarily AWS-based environment and software delivery lifecycle, partnering with application and information security teams to prevent problems and respond effectively when incidents occur.

Responsibilities

• Build and execute a risk-based DevSecOps roadmap, with clear ownership, metrics, escalation paths, and plans for team growth.
• Implement AWS safeguards for identity and access, networking, encryption, secrets, and cloud configuration; ensure useful security activity is logged.
• Integrate security controls into infrastructure as code, CI/CD, containers, and software supply chains, including scanning and policy automation.
• Coordinate with application and information security on testing, policy, audit evidence, and incident response.
• Prioritize vulnerabilities by exposure, exploitability, and business impact; drive remediation and manage exceptions.
• Investigate incidents, support containment and recovery, and turn lessons learned into improvements.

Requirements

• At least 10 years of combined software, platform/DevOps, and security engineering experience, including three or more years as a technical lead.
• Demonstrated ability to lead cross-functional security or infrastructure initiatives and influence engineering and security teams.
• Hands-on AWS security and IAM experience, including least privilege, privileged access, encryption, and network boundaries.
• Experience automating security controls through scripting, infrastructure as code, CI/CD, and policy as code.
• Experience securing delivery pipelines across code, infrastructure, containers, dependencies, artifacts, and secrets.
• Strong vulnerability management and incident response experience, including communicating risk and tradeoffs to leadership.

Nice to have

• Experience building a security or DevSecOps practice and developing or managing engineers.
• Kubernetes and container security, secure software development, supply chain security, or security monitoring experience.
• Experience selecting tools, managing vendors or budgets, and measuring security outcomes.
• Familiarity with audit frameworks such as SOX, SOC 2, or ISO 27001.

Benefits and work setup

• Listed salary range is $220,000-240,000, depending on location and experience.
• Benefits include flexible paid time off, medical, dental, and vision coverage, equity, discounts, wellness classes, and pet insurance.