Principal Infrastructure Security Engineer
Zeta Global8 hours ago
Base Salary
$220k - $240k/yr
Responsibilities
- Define and execute a risk-based DevSecOps roadmap, including ownership, metrics, escalation paths, and team-growth plans.
- Implement preventive AWS security controls for identity, networking, encryption, secrets and key management, cloud configuration, and security logging.
- Embed security into infrastructure-as-code, CI/CD, containers, orchestration, software supply chains, and automated pipeline controls.
- Partner with AppSec and InfoSec on security testing, policy, risk management, audit evidence, and incident response.
- Triage vulnerabilities by exposure, exploitability, and business impact; coordinate remediation, track exceptions, and support investigation, containment, recovery, and post-incident improvements.
- Lead cross-functional infrastructure and security initiatives and communicate security risks and tradeoffs to leadership.
Requirements
- 10+ years of combined experience in software, platform/DevOps, and security engineering, with at least 3 years as a technical lead.
- Experience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams.
- Hands-on experience with AWS security and IAM, including least privilege, service identities, privileged access, encryption, networking, and security boundaries.
- Experience automating security controls with scripting, infrastructure-as-code, CI/CD, and policy-as-code.
- Experience securing delivery pipelines, including infrastructure-as-code, CI/CD, containers, dependencies, artifacts, and secrets.
- Experience prioritizing vulnerabilities and establishing ownership, escalation, exception, and remediation workflows.
- Experience with security incident investigation, containment, recovery, and post-incident improvement.
- Preferred: experience building a security or DevSecOps practice and hiring, developing, or managing engineers.
- Preferred: Kubernetes and container security, software supply chain security, secure SDLC practices, and security observability or detection partnerships with an InfoSec/SOC team.
- Preferred: experience selecting security tools, managing vendors and budgets, measuring control coverage and risk reduction, and supporting SOX, SOC 2, or ISO 27001 audit controls.
Benefits
- Unlimited PTO.
- Medical, dental, and vision coverage.
- Employee equity.
- Employee discounts, virtual wellness classes, and pet insurance.
Tech Stack
Categories
About Zeta Global
Zeta Global builds an AI-powered marketing cloud that unifies customer data, analytics, and omnichannel activation for enterprise brands and agencies. Its Zeta Marketing Platform combines martech and adtech—spanning CRM, email, display, and social—to acquire, grow, and retain customers on a subscription and media-buying model. Founded in 2007 and headquartered in New York City, Zeta is a public company trading on the NYSE under the ticker ZETA.