Principal Infrastructure Security Engineer

Role Overview

This is a hands-on Principal Infrastructure Security opportunity within the DevSecOps practice that strengthens security across our primarily AWS-based infrastructure and software delivery. Partner with AppSec and InfoSec to prevent issues and respond effectively when they arise. This is a player-coach role: set strategy while staying close to the technical work.

What You'll Do

* Define and execute a risk-based DevSecOps roadmap; establish ownership, metrics, escalation paths, and a plan to grow the team.
* Implement preventive AWS controls for identity, networking, encryption, secrets/key management, and cloud configuration; ensure security-relevant activity is logged for monitoring, investigation, and audit.
* Embed security into IaC, CI/CD, containers/orchestration, and software supply chains (SCA, secrets scanning, artifact integrity/signing, SBOMs where appropriate), including automated pipeline controls (SAST, IaC/container scanning, policy-as-code).
* Partner with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response.
* Triage and prioritize vulnerabilities by exposure, exploitability, and business impact; coordinate remediation, track exceptions, and support investigation, containment, recovery, and post-incident improvement.

What We're Looking For

Required qualifications

* 10+ years combined experience in software, platform/DevOps, and security engineering; 3+ years as a technical lead.
* Experience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams.
* Hands-on AWS security and IAM (least privilege, service identities, privileged access, encryption, networking/security boundaries); experience automating controls with scripting, IaC, CI/CD, and policy-as-code.
* Experience securing delivery pipelines end to end (IaC, CI/CD, containers, dependencies/artifacts, secrets).
* Experience prioritizing vulnerabilities by risk and establishing ownership, escalation, exception, and remediation workflows.
* Experience in security incident investigation, containment, recovery, and post-incident improvement; ability to communicate risk and tradeoffs to leadership.

Preferred qualifications

* Experience building a security/DevSecOps practice and hiring, developing, or managing engineers.
* Kubernetes/container security; software supply chain and secure SDLC practices; security observability/detection partnership with InfoSec/SOC.
* Experience selecting security tools, managing vendors and budgets, and measuring control coverage, risk reduction, and remediation progress.
* Familiarity with public-company or regulated audit controls (e.g., SOX, SOC 2, ISO 27001).

BENEFITS & PERKS

* Unlimited PTO
* Excellent medical, dental, and vision coverage
* Employee Equity
* Employee Discounts, Virtual Wellness Classes, and Pet Insurance and more!!

SALARY RANGE

The salary range for this role is $220,000 - $240,000, depending on location and experience.

PEOPLE & CULTURE AT ZETA

Zeta considers applicants for employment without regard to, and does not discriminate on the basis of an individual’s sex, race, color, religion, age, disability, status as a veteran, or national or ethnic origin; nor does Zeta discriminate on the basis of sexual orientation, gender identity or expression.

We’re committed to building a workplace culture of trust and belonging, so everyone feels invited to bring their whole selves to work. We provide a forum for employees to celebrate, support, and advocate for one another. Learn more about our commitment to diversity, equity and inclusion here: https://zetaglobal.com/blog/a-look-into-zetas-ergs/

ZETA IN THE NEWS!

https://zetaglobal.com/press/?cat=press-releases

#LI-TS1