Principal Infrastructure Security Engineer

Zeta Global

1d•$220,000 - $240,000

About The Position

This is a hands-on Principal Infrastructure Security role within Zeta Global’s DevSecOps practice, focused on strengthening security across primarily AWS-based infrastructure and software delivery. The role partners with Application Security (AppSec) and Information Security (InfoSec) to prevent security issues and respond effectively when they occur. It is a player-coach position: the successful candidate sets strategy while remaining closely involved in technical work. The role defines and executes a risk-based DevSecOps roadmap; establishes ownership, metrics, escalation paths, and a plan to grow the team; and implements preventive AWS controls for identity, networking, encryption, secrets and key management, and cloud configuration. It also embeds security into infrastructure as code, CI/CD, containers and orchestration, and software supply chains. The position works with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response, and coordinates vulnerability remediation and incident improvement.

Requirements

10+ years of combined experience in software, platform/DevOps, and security engineering.
At least 3 years of experience as a technical lead.
Experience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams.
Hands-on AWS security and IAM experience, including least privilege, service identities, privileged access, encryption, networking, and security boundaries.
Experience automating controls with scripting, infrastructure as code, CI/CD, and policy-as-code.
Experience securing delivery pipelines end to end, including infrastructure as code, CI/CD, containers, dependencies and artifacts, and secrets.
Experience prioritizing vulnerabilities by risk and establishing ownership, escalation, exception, and remediation workflows.
Experience in security incident investigation, containment, recovery, and post-incident improvement.
Ability to communicate risk and tradeoffs to leadership.

Nice To Haves

Experience building a security or DevSecOps practice and hiring, developing, or managing engineers.
Kubernetes and container security experience.
Experience with software supply chain security and secure SDLC practices.
Experience partnering with InfoSec or a SOC on security observability and detection.
Experience selecting security tools, managing vendors and budgets, and measuring control coverage, risk reduction, and remediation progress.
Familiarity with public-company or regulated audit controls such as SOX, SOC 2, or ISO 27001.

Responsibilities

Define and execute a risk-based DevSecOps roadmap, establishing ownership, metrics, escalation paths, and a plan to grow the team.
Implement preventive AWS controls for identity, networking, encryption, secrets and key management, and cloud configuration.
Ensure security-relevant activity is logged for monitoring, investigation, and audit.
Embed security into infrastructure as code, CI/CD, containers and orchestration, and software supply chains, including software composition analysis, secrets scanning, artifact integrity and signing, and SBOMs where appropriate.
Implement automated pipeline controls such as SAST, infrastructure-as-code and container scanning, and policy-as-code.
Partner with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response.
Triage and prioritize vulnerabilities by exposure, exploitability, and business impact; coordinate remediation and track exceptions.
Support security investigation, containment, recovery, and post-incident improvement.