Principal Infrastructure Security Engineer

Role Overview

This is a hands-on Principal Infrastructure Security opportunity within the DevSecOps practice that strengthens security across our primarily AWS-based infrastructure and software delivery. Partner with AppSec and InfoSec to prevent issues and respond effectively when they arise. This is a player-coach role: set strategy while staying close to the technical work.

What You'll Do

• Define and execute a risk-based DevSecOps roadmap; establish ownership, metrics, escalation paths, and a plan to grow the team.
• Implement preventive AWS controls for identity, networking, encryption, secrets/key management, and cloud configuration; ensure security-relevant activity is logged for monitoring, investigation, and audit.
• Embed security into IaC, CI/CD, containers/orchestration, and software supply chains (SCA, secrets scanning, artifact integrity/signing, SBOMs where appropriate), including automated pipeline controls (SAST, IaC/container scanning, policy-as-code).
• Partner with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response.
• Triage and prioritize vulnerabilities by exposure, exploitability, and business impact; coordinate remediation, track exceptions, and support investigation, containment, recovery, and post-incident improvement.

Required qualifications

• 10+ years combined experience in software, platform/DevOps, and security engineering; 3+ years as a technical lead.
• Experience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams.
• Hands-on AWS security and IAM (least privilege, service identities, privileged access, encryption, networking/security boundaries); experience automating controls with scripting, IaC, CI/CD, and policy-as-code.
• Experience securing delivery pipelines end to end (IaC, CI/CD, containers, dependencies/artifacts, secrets).
• Experience prioritizing vulnerabilities by risk and establishing ownership, escalation, exception, and remediation workflows.
• Experience in security incident investigation, containment, recovery, and post-incident improvement; ability to communicate risk and tradeoffs to leadership.

Preferred qualifications

• Experience building a security/DevSecOps practice and hiring, developing, or managing engineers.
• Kubernetes/container security; software supply chain and secure SDLC practices; security observability/detection partnership with InfoSec/SOC.
• Experience selecting security tools, managing vendors and budgets, and measuring control coverage, risk reduction, and remediation progress.
• Familiarity with public-company or regulated audit controls (e.g., SOX, SOC 2, ISO 27001).

Benefits & Perks

• Unlimited PTO
• Excellent medical, dental, and vision coverage
• Employee Equity
• Employee Discounts, Virtual Wellness Classes, and Pet Insurance and more!!

Salary Range

The salary range for this role is $220,000 - $240,000, depending on location and experience.

People & Culture at Zeta

We're committed to building a workplace culture of trust and belonging, so everyone feels invited to bring their whole selves to work. We provide a forum for employees to celebrate, support, and advocate for one another.

ZETA IN THE NEWS!

#LI-TS1