Principal Infrastructure Security Engineer
New
Z
Zeta GlobalCloud security
Remote - United StatesFull-TimePrincipal
Salary220,000 - 240,000 USD per year
Apply NowOpens the employer's application page
Job Details
- Experience
- 10+ years combined experience in software, platform/DevOps, and security engineering; 3+ years as a technical lead.
- Required Skills
- CI/CDScripting
Requirements
- Have 10+ years of combined experience in software, platform/DevOps, and security engineering.
- Have 3+ years of experience as a technical lead.
- Have experience leading cross-functional security or infrastructure initiatives and influencing engineering, DevOps/platform, AppSec, and InfoSec teams.
- Bring hands-on AWS security and IAM experience, including least privilege, service identities, privileged access, encryption, networking, and security boundaries.
- Have experience automating controls with scripting, IaC, CI/CD, and policy-as-code.
- Have experience securing delivery pipelines end to end, including IaC, CI/CD, containers, dependencies and artifacts, and secrets.
- Have experience prioritizing vulnerabilities by risk and establishing ownership, escalation, exception, and remediation workflows.
- Have experience in security incident investigation, containment, recovery, and post-incident improvement.
- Be able to communicate risk and tradeoffs to leadership.
- Preferred: experience building a security or DevSecOps practice and hiring, developing, or managing engineers.
- Preferred: Kubernetes or container security, software supply chain and secure SDLC practices, and security observability or detection partnership with InfoSec/SOC.
- Preferred: experience selecting security tools, managing vendors and budgets, and measuring control coverage, risk reduction, and remediation progress.
- Preferred: familiarity with SOX, SOC 2, or ISO 27001 audit controls.
Responsibilities
- Define and execute a risk-based DevSecOps roadmap, establishing ownership, metrics, escalation paths, and a plan to grow the team.
- Implement preventive AWS controls for identity, networking, encryption, secrets and key management, and cloud configuration.
- Ensure security-relevant activity is logged for monitoring, investigation, and audit.
- Embed security into IaC, CI/CD, containers and orchestration, and software supply chains.
- Automate pipeline controls including SAST, IaC and container scanning, and policy-as-code.
- Partner with AppSec and InfoSec on security testing, policy, risk, audit evidence, and incident response.
- Triage and prioritize vulnerabilities by exposure, exploitability, and business impact.
- Coordinate remediation, track exceptions, and support investigation, containment, recovery, and post-incident improvement.
View Full Description & ApplyYou'll be redirected to the employer's site
